I have deployed a Site to Site Policy base VPN tunnel and I have a requirement that some of the traffic has to go via the VPN tunnel but remaining should go out via the outside interface (not via tunnel). The VPN is configured on the same Outside int...
Hi,I attempted to update a Cisco Firepower 2110 Threat Defense firewall to v7.4.3 from 7.4.2.2. It passed the readiness check but then errored during the upgrade and rolled back. It provided the error below in the log:user: 'admin' cannot be created,...
I have configured a Security Zone or Interface Group that contains multiple interfaces (each has its own unique IP/subnet). When I use either the Security Zone or Interface Group as the destination interface object in a NAT rule. How would I know whi...
So I deployed two Firepower 1010s in FTD mode in August -- and they both stopped working today -- FDM showed the ports as all greyed out -- except for the MGMT which was green. The physical LEDs on the 1010 and switch showed as green. License says ...
Hi all, We currently have our FMCv on version 7.0.8.1, however, looking at upgrading our VMware environment to ESXi 8 so planning to upgrade the FMCv to 7.4.3 first. Is anyone running FMCv 7.4.3 on ESXi 8 and if so have there been any issues I need t...
Hi All, Under Firepower MCv Device License, It shows 100000 as the purchased license while i purchased for only 2 firewalls, can anyone explain why the quantity is 100000??
In an IC3000 Computing Gateway, Cyber Vision Sensor version 4.1.1 was deployed. The basic configuration has been completed. The eth0 interface has been added to a bridge, and the remaining interfaces have been configured correctly. However, the Cyber...
Hi all,I have the following configuration on AWS Cloud using Gateway load balancer:GWLB endpoint -> GWLB (geneve protocol) -> inside interface Cisco ASAv (version 9.22) -> outside interface Cisco ASAv -> InternetNVE 1 configuration:nve 1 encapsulatio...
Hi Team, Greetings. Currently We deployed new FMCv 7.6.2 on our customer Private Cloud. after we create Access Control Policy, etc, when try to click menu "Generate Report" : somehow, FMC showed no response for the report being generated ?? *the b...
Dear Team,In FMC any kind of events not showing. I check logs in the Analysis > Connections > Events its blank, Even I filter last 7 days but its not showing anything.Time zone are matching with FTD & setting time manually on FMC. NTP server not ava...
Hello team, so far we have been using 2 ISP providers for our local network. L3 was configured on ASA 5585. Now we are changing ASA with 2xFPR1230 with FTD 7.7 ISP_1 PPPOE connection configured on ASA with public IP static , will configure on L3 core...
When accessing a Firepower 4225 running ASA from a Windows 11 (Enterprise) workstation, after approx 20-30 minutes the window starts to lag. It eventually becomes unusable because of how laggy it is (ultimately forcing a close through task manager be...
Hi everyone, I’d like to share a troubleshooting experience during an upgrade from FTD 7.2.5.1 to 7.6.2 on a Firepower 4115 HA pair managed by FMC, and how we ultimately resolved a persistent sftunnel communication failure related to certificates. En...
We have following Setup:FTD1: Hub: Static VTI. WIth FMC in the local Network. FTD hast Static Public IP.FTD2: Spoke: FTD Behind a Cheap Router, Dynamic Public IP. Therefore configured Dynamic VTI. Default Route propagated through DHCP (Outside Interf...
I am using FTD 3110 managed by FMC 7.6. I have interfaces in production for Guest Access and I want to assign them to a separate Virtual Router to segregate the traffic for guest on routing level. What is the impact of that in the production? Will th...
