Hi!I have found a helpful guide here in the community to be able to configure haipinning NAT on my ASA, but can't get it to work. My setup- one external IP-address assigned to outside: a.b.c.d- one internal subnet with clients running on 10.0.17.0/24...
Forum Posts
I am trying to confirm if this bug (Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak Vulnerability) affects our ASA 5506 firewall. In the link, it states the first fixed releases is 9.16.3.19, yet ...
Hi all, How do troubleshoot this error?My device model is Cisco Firepower 1010 Threat Defense running with version 7.1.0 and the memory is high usage Please also see the screenshot
Is it possible to have TOR blocked except for one website?We need one website to allow TOR but don't want to open the entire network for this to happen.
Resolved! FTD isn't able to NAT multiple IPs
I'm beating my head against a wall here. Here's my scenario. My ISP provides me with a block of IP addresses. They required me to have a router to route that block of IPs to the ISP network. There is no NAT on this router. From my router, I have thre...
Resolved! Firepower 1100 Series Manager
Hello everyone, we recently purchased a Cisco Firepower 1150. This is my first time installing a Firepower 1150 and plan to use FTD instead of ASA. Previously, I had only installed a Cisco ASA. So my question is, as far as I know, FTD must be managed...
Hello All, Our school was provided Cisco Umbrella by our internet provider. I do have admin access to it but I am new to its setup.In another school district, I used Securly and it auto-emailed an admin when a student did a search for inappropriate a...
Resolved! FMC upgrade issues
Currently Software1 Management Center 6.6.52 Devices 6.6.4Need to replace to support upgrade to version 7.0.0+. as it has required full replacement on 2-3 occasions already, our experience has shown us that it can’t handle both the volume of thousand...
Resolved! FMC Version Suggestions for Upgrade
Hi all -I am beginning a project to migrate from 6.6.5, that is controlling an old AMP8150 and a pair of FTD1100s. The Migration is away from the 8150 and a pair of ASA5500 to the Secure Firewall 3100 series, I have been reading the documentation I'...
I'm attempting to upgrade our Cisco Firepower 2110 appliance to FTD v7.0.1 (we're currently running FTD 6.4.0.9) When I run the Readiness Check, it fails and points me to a log that has the following message: Tailing /ngfw/var/log/sf/Cisco_FTD_SSP_FP...
cisco-firepower-api/get-sensor-info.ps1 at master · john-babio/cisco-firepower-api (github.com)I wrote some quick powershell to pull sensor info from FMC. I also includes some examples on how to narrow the data down. If you have any questions feel fr...
Gentlemen,I was reading about Cisco ISE and happened to come across the term "Enable Single Connect Mode". I understand by selecting this option, Cisco ISE will minimize the number of TCP connections opened for duplicate transactions and retain the c...
I'm looking at about 30 branch offices connecting to one HQ through VPN(using pat). The internet becomes very slow quickly and upon checking NAT the translations are getting to 131062 fast and capping there. What might be the problem?
Hello everyone, I am trying to setup a site-to-site tunnel to connect a physical onprem Cisco Firepower to a virtual Cisco Firepower in Azure. I have tried sooo much and cant get it to work. I have configure the interfaces with attaching a public ip ...
I have multiple FTDs deployed with each site able to do anyconnect. Since they are separate VPN's I want to create a CSR for a Wildcard certificate. When I go through the creation of the CSR for this is there anything I need to do in particular so th...
