Hey all,We're configuring a firewall for a client. On our internet facing outside we're wanting to configure connection rules to block basically everything except our clients, they connect via a remote access VPN, using Anyconnect, and using a site-t...
Forum Posts
Hi all: I am having an issue with a 1:1 NAT on an FTD. I have two FTDs (both managed by an FMC), and they both have 1:1 NATs. The NATs are working on one FTD, but not on the other. They have different flavors of internet, and the problem is relate...
I can't find the exact answer to this and have read mixed opinions. We used to use Firepower with ASA. The previous network engineer simply left the default value for both the HOME_NET and EXTERNAL_NET variables (which is "any.") I took over the posi...
HelloI am surprised by the lack of documentation on this. Currently I cannot login to SSH on my firepower 1010 appliance through data interface or management interface. Although both are set to allow https and ssh, only the management interface wil...
I have a question related to the interface configuration options for Smart Software Manager On-Prem.In the User Guide I find the following:SSM On Prem supports up to four interfaces that can be configured and used for user management, product registr...
Dears,Please am trying to make cisco FTD to send user administrative logs to a syslog server and also via emails to system administrator.I mean logs that has to do with the following but not limited to:-user log on to the FTD cli-Upgrades done on the...
Hi guys, Our current setup is we get users to login to cisco anyconnect with their AD username and password then they get an alert to allow the connection via Microsoft Authenticator.This is working fine however occasionally we have a situation where...
Today I reviewed my network discovery logs and started manually inputting some pending servers. I discovered that there are multiple ways to key in a windows server, with vastly different vulnerability recommendations. I use these recommendations in ...
Resolved! Static NAT issue (outside to inside)
Hi, need help on my CME-PABX that's connect to the external SIP server for external calls. The external SIP server is pointing to public ip (202.x.x.1) as per diagram below. I need to map this to our CME (10.10.130.1) in order to reach the external S...
Hi,We are managing our FTD devices via FMC. for one of policy attached to one of IPS I get below warning."This rule uses an interface object that contains no defined object"I get this warning every time i deploy something from FMC to FTD devices, any...
Resolved! FTD Replacement Question
HiSo FTD 2120 managed by FMC has failed I have a spare 2130 can I use this as a replacement I have backups of 2120 s this doable and how please.?? Thanks
Hi there,We are trying to implement PBR on FTD v7.0.4 managing by FDM. The route-map object has been created by Smart CLI and could be verified in 'running.conf'. While applying the route-map object, although the task was completed, I couldn't find t...
Hello DearsI am trying to setup DNS client on FMC after complemeting the confirgation the FMC still not getting updates from our inhouse DNS serverany one can help me in that ? Bests
Hello, I've deployed Cisco FMCv & FTDv in Azure by following this document:https://community.cisco.com/t5/security-knowledge-base/high-availability-and-scalability-design-and-deployment-of-cisco/ta-p/4109439As the static routes are concerned, differe...
We're using FTD 2100 with FMC, need to get active RA VPN sessions counter over SNMP.Information I've found is related to ASA and not suitable for FP.Can anybody share useful FP OIDs or point to documentation links?
