Hi, we reconfigure our L2L VPN from crypto map to VTI with iBGP. We use DHCP server which is at a remote location. During the failover, BGP flapped and after some time some devices didnt get the IP address. I checked sh conn for the IP address of the...
Dear all, Recently I've faced an issue related to my License status Cisco Smart Software Manager on FMC red marked (image attached) and I want to de-register and register my license back there is any effect on Anyconnect VPN or not?
Can anybody share his/her experience with NAT/PAT running in ASA/FTD cluster if PAT is handled in centralized mode?This firewall is mostly used for inbound access, so almost all traffic goes through static NAT or static PAT, but we still have few dyn...
Hello I am trying to understand the report but I am not 100% sure how to read everything in Bold and underlined: I am testing and find this packet gets into the network but I do not want it to. So have run a packet capture on the FMC and get this rep...
Dear All seniors, I am facing a firepower firmware upgrade failure. The current version is 6.3. I would like to update to 6.4.0 but it's not working. Please advise and suggest me. Thank for your help. Best regards, Htun Naing Senior Support Enginee...
Hi all, We've migrated some locally managed ASAs to FMC using Firepower Migration Tool.This resulted in having the same object but with with different object names (e.g. with suffix 'FTD-Mig' appended at the end of object name), single ASA ACE that h...
how to add two static route in firepower threat defense dual isp for example i have two subnet inside-zoneA> 10.0.1.1 255.255.255.0B> 10.0.2.1 255.255.255.0 Two ispoutside zone ISP1 iSP2i need to A subnet going traffic isp1 nat and subnet B going t...
I have a Cisco FMCv in the lab running 7.2.1. It is configured to automatically download the geolocation update on Friday @ 11pm. However, it hasn't updated for the last couple of weeks. I have manually downloaded and uploaded the latest Geolocati...
Hi,Seems the "ipv6 address dhcp default" command is not supported on my ASA 5520.How do I get an IPv6 global address (as well as ::/0 default route) from my ISP?Cisco Adaptive Security Appliance Software Version 9.1(7)32Device Manager Version 7.3(1)1...
Hello Dears i am looking for solution like FSSO in fortigate to do it on FTD Box managed by FMC. Best
Hello everybody, our customer has the FMCv 7.0.1.1 and two ASA5516-X (also 7.0.1.1) and the deploymentfor one device is not running, most likely because missing configuration memory. ===============TRANSACTION INFO===============Device UUID: 4b11adbe...
Hello everyone,let me ask some help to export events logs including Src/Dst ip and port from Cisco FMC as csv or excel file. Is there any way to do that ?Thanks much.
We get regular external security scans for PSN compliance.What are the best setting on and FMC/FTD so they get the correct info in the scans.Was advised by our security team to just whitelist their IP's. But it that not just defeating the object of ...
Hi, so i want to do some troubleshooting for my fmc. But when i try to do that. It said that the fmc cannot obtain troubleshooting log. I scare that the problem is my MonetDB.How can i fix this? thank you
Hello,eStreamer can't output events with RA VPN failed authentication. (Event type 1004 subtype 5)Events with correct authentication (VPN) and CONNECTION STATISTICS stream normally. (Events type 1003, subtype 1 and Events type 1004, subtype 8,9). Fr...
