Hi AllI am aware of BGP flowspec, you have a server (flowspec controller) and clients which are the bgp neighbors to the controller?How does it actually work in practice? do all the ISP routers send netflow information to the controller and based on ...
I am trying to upgrade FXOS from 2.10 to 2.16 on 4100, I uploaded package as usual and clicked on upgrade. There was a message saying package is being unpacked and them a message about comaptibility with FTD instance running in the device. Accepted a...
Hey all, I currently have an HA pair of FTD 4145 running v7.6.2 When I run command "show failover state" I get a state of Sync Skipped - STANDBYCan anyone provide some clarification as to what this state means and why the sync was skipped? Has the H...
HiI have a static Route Based VPN and am wondering if I create a loopback interface on the FTD is there a way to allow this IP over the VPN to test the VPN or generate some traffic from the FTD across the VPN ?? Thanks
Hi all,i Have FMCv on esxi version 7.2.4 connect with 2 FTD same version need to Replace the FMC to new one 1700 it`s version 7.4and after that i need to replace the two FTD with new ones 3100 serise -----i do this berfore but the FMC was 1600 to 170...
I upgraded from 7.0.8.1-4 to 7.0.8.2-2, the pre-check was OK but I encountered the following error in the log file: EXPORT ERROR: The source parameter ("/var/cisco/deploy/sandbox/snort3-pkg/usr/local/sf/bin/snort-75-3.1.0.800-9") did not pass the Typ...
Hi, I'll shortly have to deploy a physical firepower of the 4100 family "4115". I know that the first MGMT interface showing up is for chassis FXOS purpuses. In Cisco videos I've seen that the management interface used for FTD "logical instance" is t...
I have some firewalls running FDM locally and not managed by an FMC that keep shunning specific IP Addresses. How do I configure the FTD to prevent these IP addresses from being shunned like you can in an ASA or with the FMC?
On GitHub is available a new firewall analyzer tool: https://github.com/WatchThisFirewall/WTF.v1Watch-This-Firewall is a firewall assessment tool designed to connect to firewalls and perform a comprehensive analysis of their configurations. It checks...
Hi folks, We have a ASA on 9.12(4)67. There is an ONT that is connected on the external interface and we use DHCP to retrieve our IP and gateway etc. for out internet connection. If this interface drops and then recovers (ONT is in a different room ...
Running FMC 6.2.3.3 with multiple domains with FTD 2100. Added network objects which are visible when scrolling through the object pages. But are not seen when using the search filter and entering the ip address or name. Nor are the new objects sh...
Hello Community, We are planning to change the FMC IP.The FTD is already onboarded and in sync with FMC (production environment), so factory reset or config loss is not an option. To update FMC IP on FTD, we need the registration key so is there any ...
Hi everyone,I’m testing Cisco Secure Firewall Management Center (FMC) eStreamer FQE (7.4.x) and wanted to check behavior around ConnectionEvent export.What I’ve validated so fareStreamer client (python) connects successfully over TCP 8302 (mutual TLS...
Has anyone experienced configuring the FMC gui to be reachable and can be accessed from other locations and can register the FTD 2? the type of connection is via MPLS.
Hello guys,we try to access a firepower 1010 (remote office) from our headquater over an ipsec tunnel via ssh.Therefore we configured a loopback interface, which is part of the routing over the vpn, and this loopback is pingeable.Somehow we are not a...
