Scenario: I'm on ASA 5555Users/AAA > AAA Server Groups > LOCAL Server GroupEdit > Enable Local User Lockout > Maximum Attempts = 3I can't find any info about how/where to unlock an account or if it happens automatically.
Hello,I configure a control plane ACL to a outside interface for limiting AnyConnect access on ASA 5520, will enter the following commands on the device:! interface GigabitEthernet0/0! nameif outside! security-level 0! ip address 1.2.3.4 255.255.2...
We are analyzing the logs from all of our devices. Recently, a question came up on the %FTD-6-302013 message. It appears to be only happening on outbound connections from the inside network to the outside. We never see messages like that for connecti...
I'm running the VM version of the FMC. I have 7.0.4 installed. When I go to an SFR module and go to Advanced Troubleshooting, the only option I have is "File Download". I don't have any tabs for Packet Capture or Packet Tracer. What could be caus...
Does changing these types of parameters in the FMC apply to all devices managed via FMC such as the FTD?
Hello,I have a Cisco SFR in the form of an FMC running version 6.7.0.3. It is supporting firepowers running version 6.4.0.132. The FMC is just an FMC; it is not an FMCv300. For some reason, I was under the impression version 6.7 was as high a vers...
I don't even see how to configure vty lines on the FTD. Can't find anything covered in the docs about this. Any help?
HelloI have Firepower 1120 and configured s2s VPN to 3rd party using parameters as belowIKEv1 Encryption AES-256 Hash SHA Lifetime: 21600IPSec Encryption AES-256 Hash SHA Lifetime: 3600DH14 With NAT nat (local_ip_pool,outsite_interface) source stati...
We have a couple FPR-2130s and FPR-2110s. We would like to change our default/dedicated management port to be one of our inside/data ports for simplicity's sake (Management1/1 -> Gig1/2). According to Cisco, you can do this via the CLI or FMC gui, bu...
Hi all,We purchased the Firepower 2110 loaded with ASA. While sending from factory and there was no base license enabled.We commissioned the Firewall and while we are trying to access the Firewall from outside Network it throws an error as SSL.
Hello Team, We have got a request from our client to add a security policy on the Cisco FTD(4115). The security policy has 800 Network objects(IP addresses and subnets) in the target field. We are not sure how this will work because the firewall is ...
Hello all, we are currently on FTD version 7.1.0.1 and looking to upgrade to 7.2 or 7.3. A few months ago I had been reading that 7.3 had some issues with unintended restarts, configuration issues, reduced number of objects that could be held in a si...
Hi All,Let's say the syslog server being used can use any port for syslog, is just using TCP 514 instead of default UDP 514 good practice?Aside from current logging stopping and/or breaking, is just changing the setting potentially impacting anything...
Hello,We bought a whole set of ASA 5506-x w/firepower + security licenses +50 AnyConnect VPN licenses from a trusted vendor, but it's look like this version (9.12) does not support Firepower!! The Cisco technician told us due to RAM issues 5506-x aft...
How do we enable “dhcprelay information trust-all” in a Firepower 1120 running version 7.2.0.1? DHCP snooping is activated in LAN, and the firewall is acting as ip helper/dhcp relay. The firewall is dropping dhcp packets because we haven’t been able ...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM | ||
| 08-10-2026 08:58 AM |
| User | Count |
|---|---|
| 4 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
