Hi; I have two FMC 2500 on HA; planning upgrade from 6.4.0-13 to 6.6.1-91. My process: 1 backup. 2 check ntp and space on disk. 3 upload file on active and standby 4 pause HA synchronization 5 run readiness on both devices, active and standby 6 updat...
Forum Posts
Hi Guys, I would like to know how to calculate max concurrent session given only the total number of users and total number of devices? I need to size my firewall. Thank you
Resolved! FMC Question
HISo we have an FMC 1000 which is currently managing x1 FTD I have been sent a replacment FD and cant add to the FMC as I keep getting the below error, I was considering de-registering FMC and then generating a new token on SSM and trying to re-regis...
Hey all,We're configuring a firewall for a client. On our internet facing outside we're wanting to configure connection rules to block basically everything except our clients, they connect via a remote access VPN, using Anyconnect, and using a site-t...
Hi all: I am having an issue with a 1:1 NAT on an FTD. I have two FTDs (both managed by an FMC), and they both have 1:1 NATs. The NATs are working on one FTD, but not on the other. They have different flavors of internet, and the problem is relate...
I can't find the exact answer to this and have read mixed opinions. We used to use Firepower with ASA. The previous network engineer simply left the default value for both the HOME_NET and EXTERNAL_NET variables (which is "any.") I took over the posi...
HelloI am surprised by the lack of documentation on this. Currently I cannot login to SSH on my firepower 1010 appliance through data interface or management interface. Although both are set to allow https and ssh, only the management interface wil...
I have a question related to the interface configuration options for Smart Software Manager On-Prem.In the User Guide I find the following:SSM On Prem supports up to four interfaces that can be configured and used for user management, product registr...
Dears,Please am trying to make cisco FTD to send user administrative logs to a syslog server and also via emails to system administrator.I mean logs that has to do with the following but not limited to:-user log on to the FTD cli-Upgrades done on the...
Hi guys, Our current setup is we get users to login to cisco anyconnect with their AD username and password then they get an alert to allow the connection via Microsoft Authenticator.This is working fine however occasionally we have a situation where...
Today I reviewed my network discovery logs and started manually inputting some pending servers. I discovered that there are multiple ways to key in a windows server, with vastly different vulnerability recommendations. I use these recommendations in ...
Resolved! Static NAT issue (outside to inside)
Hi, need help on my CME-PABX that's connect to the external SIP server for external calls. The external SIP server is pointing to public ip (202.x.x.1) as per diagram below. I need to map this to our CME (10.10.130.1) in order to reach the external S...
Hi,We are managing our FTD devices via FMC. for one of policy attached to one of IPS I get below warning."This rule uses an interface object that contains no defined object"I get this warning every time i deploy something from FMC to FTD devices, any...
Resolved! FTD Replacement Question
HiSo FTD 2120 managed by FMC has failed I have a spare 2130 can I use this as a replacement I have backups of 2120 s this doable and how please.?? Thanks
Hi there,We are trying to implement PBR on FTD v7.0.4 managing by FDM. The route-map object has been created by Smart CLI and could be verified in 'running.conf'. While applying the route-map object, although the task was completed, I couldn't find t...
