We are looking for a way to export Firepower Management Center config to text so we can install to a "stand alone" ASA. We had a pair of FMC managed 5508-x ASA die on us and need a quick way to dump out the config in stored in FMC to clear text to in...
Forum Posts
We currently have a Firepower 4110 running 7.0.4 managed by an FMCv also running 7.0.4. We've been experiencing some asp-drops because of NAT exhaustion, so I tried to change the dynamic Auto NAT rule from a single IP address to a range of IP address...
I am doing some FMCv testing in a lab. Is there an easy way to do a factory reset of an FMCv (or even an FMC appliance)? We haven't been able to find anything in Google searches. Otherwise, I have to keep building new FMCvs when we need to start from...
I am doing first tests with the new Secure Firewall 3120 (in application mode with ASA 9.18.2.5).In these tests I am experiencing configuration replication issues in system context.When creating a new context only a part of the context configuration ...
Would Device Manager Version 7.1(5) currently used with an ASA5520 on 8.4(7)30 work with the ASA5520 on 9.1.7.23? This document gives the impression any ASDM 7.1.x is still compatible with ASA 9.1.x: https://www.cisco.com/c/en/us/td/docs/security/asa...
I have a working site to site vpn between a client router and a ftd.I have a device on the router side that need to access a resource on the internet so I think there is no point on send that traffic to the tunnel to then send it to the internet so I...
We're using Anyconnect SSL VPN to ASA.* Asa inside interface is 192.168.1.1/24* There is nothing else but another firewall on the other end of "insde": 192.168.1.2* VPN clients use IP pools 172.16.1.0/24 and 172.16.2.0/24. This is mainly set up such ...
I have read quite a few articles online but I can't seem to find a definitive answer to this seemingly simple question. Unfortunately, I can't test it out on my gear either. Is it as simple as subinterfaces or is that not possible with a bridge-group...
Resolved! Radware DefensePro and Firepower 4112
Hello, I have a customer with a Firepower 4112 appliance with a FTD instance and they have asked me if it's possible to run an additional instance of Radware DefensePro in the same chassis. Anyone know if that's supported on the 4112? I'm only able ...
Hello everyone,I have a problem with my FPR, since no internet connection is established, kindly find attached photo which shows an overview of the FPR status,Model: Cisco Firepower 1010 Threat DefenseVersion: 6.4.0-102Topology: Mikrotik port 2 conne...
Hi everyone!I was wondering if anyone can help us with the below.We have several Cisco switches, APs and a Wireless Controller and we would like to kow if there is a way to automate the patching process. I have found this link here https://community....
Resolved! Upgrade to FMCv300?
I have a FMCv currently in vCenter and speced with 8vCPU and 32GB ram. I want to move to FMCv300. There are two licenses related to FMCv300: SF-FMC-VMW-25-300 and SF-FMC-VMW-300-K9. I assume I would need the “SF-FMC-VMW-25-300” in my case to move my ...
What would be the difference between an allow rule with no IPS policy selected and a trust rule? TIA
I have asked for help before on this module and did not get anywhere, but here goes again. I am looking to re-image the AP module due to the fact it is not accessible through CLI or WEB app. I would appreciate any assistance on getting the WIFI modul...
Hello Folks, I have 2 FP-2210 in HA managed by FMC and I noticed recently that one of the Firewalls has no valid SSH credentials, based on the Keepass, I want to recover that specific Firewall CLI password without reboot so I won't bother productio...
