Hi ,I have a client Prod network with the following setup:1. 2 x virtual FMCs (Active/Standby)2. A Pair of Firepower 4115 with multiple FTDs (Active/Stadby)3. Single Firepower 2100 with one FTDI have been tasked to make sure the network management i...
Forum Posts
Resolved! AnyConnect VPN per user restrictions
We are running FTD firewalls connected to FMC and have AnyConnect fully configured and setup. We are using Active Directory to authenticate users for VPN login.Our office network consists of multiple VLANs that are restricted with ACL rules. All the ...
Hi guys kidNetwork here, this is my first post and I'm happy to become part of the community !I am a Junior in Networking and Cyber Security and I have still lot to learn and thats why I am here today. I was just wondering if you guys could tell your...
I had an issue & failed over to the standby, then rebooted the Primary (now the standby unit).The management IP responds to ping, but I can't SSH to it. I had a physical reboot performed, same result. I have had a console added & startup is normal, I...
Hi,Is it possible to capture ASA Firepower real time eventing to Syslog for historical purposes ?I have set up a successful syslog server, however this is just receiving ASA events and traffic connections statuses..Thanks,Shawn
I am using the web update-url for DDNS updates but my ASA is behind a NAT and only my NAT'd IP is updated on domains.google.com. I would like to leave out the myip=<a> section so google domains will simply use the IP the packet was recieved from for ...
Does Cisco SMC 2210 support Port-channel / NIC Bonding ?
Hi Cisco Freinds, We have a customer with HA 1120, one of them won't show green on the FMC. Sftunnel on the Device is listening, show manager shows it as completed. The issue is the time on one unit is out, and we think this is causing heartbeat issu...
Resolved! ACL for DNS Service
/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0cm 5.4pt 0cm 5.4pt; mso-para-margin:0cm; mso-para-...
Resolved! NAT or NO NAT?
Morning So I am at my wits end. I have an FPR1010 w/ 8 STATIC IP’s (6 usable).My WAN FPR IP is x.x.x.182.I have available, .177 to .181. I am using x.x.x.177 as an IP dedicated to a server on LAN 192.268.5.42.Without NAT, NOTHING gets through and no ...
Cisco has FINALLY heard us! The purveyors and Champions of the Small to medium business markets, and produced the first match to the Cisco ASA5505. First they gave us the 5506 and we were all upset about the fact that the ports were NOT switched. W...
OUR ASA5516 firewall Firepower (sfr) module went down and came back up on 21/05/2020 .Please see below log:5/21/2020 3:21 AM BJG-R3-SFR has stopped responding (Request Timed Out)5/21/2020 3:21 AM Node BJG-R3-SFR has dropped its average response time...
We have users able to RAVPN to an office, but can't access another office. There is a site-to-site VPN tunnel between the two offices. The IPs user get when the remote in is 10.10.20.0/24 and the site they try to get to is 172.16.30.0/24.Is this a ...
We are looking for a way to export Firepower Management Center config to text so we can install to a "stand alone" ASA. We had a pair of FMC managed 5508-x ASA die on us and need a quick way to dump out the config in stored in FMC to clear text to in...
We currently have a Firepower 4110 running 7.0.4 managed by an FMCv also running 7.0.4. We've been experiencing some asp-drops because of NAT exhaustion, so I tried to change the dynamic Auto NAT rule from a single IP address to a range of IP address...
