Welcome to the Cisco Community Ask Me Anything conversation. Submit your questions from Wednesday, March 4, 2026 through Wednesday, March18 2026. Our Experts Ike Chon, Scott Nishimura, Annya Martinez Foster, Jyhan Ocana Casillas, Eder Pacheco, Willi...
Forum Posts
Hi guys, I have FPR 1140 with 1303 active rules :((I need to optimize (delete not used old rules) it.As you can see on the screen, there are no options like: "active sessions", "hit counts", "first used" or "last used". so, can you please tell me h...
When I look in the FMC, I can see that the hostnames are different. When I go to the CLI I put in configure network hostname XXXXXXX and it shows there but it doesn't show on the saved configuration when I do a show running-configuration. Is there ...
Resolved! Problem With ACLs
I am new to cisco and trying to setup a vlan with some access-lists in my cisco router 871. The router i have is connected to another router with default ip 192.168.1.1/24. My router has the WAN ip 192.168.1.110 and the vlan network is 10.0.0.0/29. T...
Hello,I've been looking into see why a snort 3 instance would restart at all the time. Where in the troubleshooting file would that be logged?Would like to know the reason why or cause. I see multiple Snort restarts daily during operation, so it does...
Hello,I understand that in Access Control rules on the FTD, there are "block" and "block with reset" actions, but how does one configure Snort / IPS to send a RST if it's dropping something (traffic that was set to "allow" in the ACP?) Furthermore, i...
I have a pair of ASA55XX series firewall and configured as active/standby configuration.I have added an add-on network adapter card on both of them and I configured the management of it. (The original management port was configured as IPS usage)I had...
Hello everyone, we are affected by this bug CSCvx89643 and there is only a workaround to fix it: whitelist the certificate on webproxy. https://bst.cisco.com/bugsearch/bug/CSCvx89643 How do we do that? Regards
When I start a configuration using the default config, all ports are up if plugged in. After the default config is finished, I make the following changes. Go into each interface (2 - remove nameif, remove bridge-group, and shutdown. After the inte...
Our FMC (7.2.2), seems to be having an issue with using proxy settings when trying to register to the SmartLicensing portal.We're able to see other .cisco.com, .sourcefire.com, traffic from this FMC traversing the proxy successfully so proxy configur...
Hi All,Anyone experienced this error upon deploying some changes on your FTD using FMC."Deployment failed due to internal errors. If problem persists after retrying, contact Cisco TAC." My initial fix is i just rebooted my FMC and so far i have not s...
Resolved! Restore point
can you create a restore point on a cisco device? ASA, FMC for example instead of backing up and saving somewhere
Resolved! MSS clamping IPSEC tunnel -ASA
Hello Community,We have a number of ipsec tunnels on our ASA 5545 running software version 9.6.We have deployed a cloud based DDOS solution using GRE tunnels for any inbound traffic ingressing into the network via the internet upstream of the ASAs. ...
Hi All Is there a way to check the Snort events/logs on the SFR or on the FMC? We need to rule out our Firepower module for a recent outage Thank you in advance
Resolved! MacSec host to host on same switch
Hi,Does Macsec support host to host encryption between hosts on the same switch?
Hi All,We are going to setup a FTD 2110 in a remote site which will have only internet connectivity. > We need to manage the FTD over Internet facing interface.(BOTH MANAGEMENT AND DATA INTERFACE IS SAME) that is the public interface.> FTD is a new b...
