Hello everybody, our customer is running a ASA5516 with rel. 9.16(3)19. Because of a bug Cisco recommended to change the management-IF frominside-IF to the outside-IF for our management software. I adapted the S2S-tunnel on both sides and added the o...
Forum Posts
Hi team,I am trying to assign a parent or base policy for a newly created access policy with the FMC API. I used the PUT method. My URL is '/api/fmc_config/v1/domain/abb07252-1ece-43d2-d526-000000000002/policy/accesspolicies/90E2BAC8-8AE5-0ed3-0001-8...
Hi,I'm configuring a PBR with SLA monitor, route track and two news default routes. I already configured with flexconfig and applied them.Route-map and features SLA monitor, route track was verified, and base-config were correct.I had to create two n...
Community,I had a question regarding the Default Network Analysis Policy in the ACP Advanced tab and how it pertains to the Intrusion Policy used in the ACP ACL rule. It is my understanding that the Default Network Analysis Policy defined in the Adva...
Ok, Going to ask a simple one here. Hopefully someone can help me out.FTD 1140n managed by FMCv. Both running 7.0.4. Setting up my first rule that looks to block IPS and malware from getting to my inside interface connected subnets. Everything looks ...
Hi all, I have a bunch of newer (4-5 month old) Cisco FPR-1010 devices. I have the outside interface plugged into a broadband modem with static IP. Sometimes the ISP has issues (Internet goes down intermittently) When it eventually comes up the outsi...
I created a second admin account on my FMC 7.1 but it only works with the GUI. When I try to use the console I get "login incorrect" and when I try SSH I get "access denied". Any ideas? TIA,Diego
Hi,We have an ASA configured as shown in the attached PDF w/topology included. We are using an Exchange email server. We can receive emails, however, outgoing emails seem to just go nowhere. All other traffic seems to pass without issue. What am I mi...
Hallo,we're setting FPR with ASA Image for VPN remote access. The users will get private IP addresses that are routed in the local LAN, so no NAT in between. As far as I understand now, these IPs are reachable from anywhere in the LAN. How would I se...
I have got another problem I am trying to solve... When I use this URL to get the access rules for a policy, it gets the rules for its parent as well... “/api/fmc_config/v1/domain/{domain_id}/policy/accesspolicies/{accesspolicy_id}/accessrules?limit=...
Hi I have read a statement same-security-traffic is not applicable on FTD. Traffic between FTD interfaces (inter) and hairpinning (intra) is allowed by default, so i thought multiple interface in same security zone in FTD by default allow Communicati...
Hi,I have to replace a Cisco Firepower Management Center 2000 with a FMC 1600. Cisco does not support this migration path. The FMC is standalone, managing 2 FTDs in HA. Current software version is 6.4.0.14. What would be the best way of the replaceme...
Hi team,I am using the API to create an access policy with the following URL with the POST action. {{protocol}}://{{hostname}}/api/fmc_config/v1/domain/{{domain_id}}/policy/accesspolicies The data (body in the POST) is like this. The prefilter poli...
Hello everyoneIP have a problem - my FXOS control drops intermittently (see the screens)Only power-off and on helps but not so long, for about 3 monthsI thought there is a bug https://bst.cisco.com/bugsearch/bug/CSCvi87019, but FXOS ver. is 2.8(1.105...
Hello.On an ASA 1120, what is the result of placing on the outside interface, an ACL with a single entry "permit IP any any"?Thank you.
