I couldn't boot sfr image for v6.4.0 while re-imaging firepower service as shown below and in the attached debug file ASA 5515: fresh reimaging firepower 6.4.0Cisco Adaptive Security Appliance Software Version 9.12(4)10---- --------------------------...
Forum Posts
Hi,Cisco FireSight Manager + FTD Is there a way of adding/assigning a private address range to a geolocation? So that it can be used in an acl and also appear against a country in the reporting?For example assign 10.0.0.1 to United Kingdom.Thanks in...
Resolved! Managing Cisco Firepower without FMC
Hi, im trying to understand the following when we say ASA with FirePower, we mean upgraded ASA boxes which have the Unified ASA Image? What is FTD? What is the Difference when we say ASA with FirePower and the Firepower Appliances? and to manage a C...
Resolved! FTD ECMP with multiple interfaces
ASA 9.3(2) introduced the concept of zones with ECMP support across different interfaces (in the same zone): You can group interfaces together into a traffic zone to accomplish traffic load balancing (using Equal Cost Multi-Path (ECMP) routing), rout...
Resolved! Cisco FMC/FTD VRF
Hi folks,We have cisco FTDs 2110 managed by FMC ver 7.0.1.We have a requirement wherein we need to onboard multiple small entities into our existing infrastructure with different ip schema. Presently, we are managing our entity routes via static.I ha...
My SSL decryption policy and rules seem to be working correctly but looking thru the logs I found an interesting anomaly. I see "invalid issuer" for traffic flows that seem to be working fine. There are also "valid" events but it seems like it depe...
Hi All In previous versions of ASDM we could directly start it by pointing the browser to https://ipaddress:8443/admin/public/asdm.jnlp The new 7.18.1.152 doesn't anymore permit this, as the Java Web Launch component was removed. Also this variant di...
Hey Team, The Last Scan shows that a few routers on my network are vulnerable for IKEv1 aggressive mode with pre-share key (CVE-2002-1623) please what are your recommendations to patch this vulnerability. thanks in advace.
This is the first time I'm noticing this but this morning the FSMC added every managed device to the Computers OU of my AD environment and I have no idea why? Reviewing the documentation the Realm configuration is for handling Users/Groups but it ex...
I a running into what appears to be this bug: CSCvm81052 : Bug Search Tool (cisco.com) but I am hesitant to implement the fix because I am running v7.0.1.1 FMC and the bug should have been fixed by now. Maybe I have something else going on? I ran ...
Hi CommunityI am trying to connect to the ASDM web interface from a PC connected directly to the management port of the ASA5520.Below is the configuration: -1. asdm2. Management Interface3. http Server4. On the PC I have connected a cat6 ethernet cab...
Hi,I was tasked to upgrade the ASA version on a firepower 4120 that has not been upgraded ever since 2016. As I read the available documentation online (I never worked/been trained on the firepower platform) I understood that ASA is a layer that runs...
Resolved! TLS on 5520 9.1(7)
the customer have 5520 with 9.1(7) the customer is asking if he can switch from TLS 1 to TLS 1.2 , my question is what is TLS 1 and what is job exactly? and is it possible to switch to TLS 1.2 on his current setup? PS:the customer isnt using any vp...
I accidently removed an FTD from FMC that is a tunnel connected tail site firewall. I went and did a FMC restore which brings the FTD back and the tunnel is up and I can ping the mgmt interface of the FTD but I cannot deploy any configs to it. Also w...
Hello everyone,Q1) How can I block ports such as 443 on the VLAN x interface IP?1) I tried ACL on the Inbound & Outbound of the VLAN x but it does not work.2) Physical router (who hosts the VLAN X interface IP) has been configured to allow port 443 B...
