Hi, so my 1 of my HA FMC MonetDB is Crashing right now.The solution i think about is by reimaging the FMC. I want to know if i reimage the FMC does it restore the MonetDB or it just gonna be the same MonetDB as before?Also, i have 2 FMC in HA mode, b...
Forum Posts
We currently have a few FTD firewalls running 6.4 managed by FMC 6.4. We are going to upgrade the FMC to 7.0 in preparation for new firewalls. After FMC upgrade, it will be like FTD 6.4 + FMC 7.0. As I understand, 3des and dh5 are depreciated since v...
Hello, When the remote end is using a dynamic IP you have the option in FMC to set the remote end IP address as dynamic, but you can also configure the Site to Site VPN as a "Hub and Spoke". Both types of VPN will use a dynamic crypto ACL, so is ther...
Hello All I have FTD 2110 running ASA 9.14.1 in appliance mode. Via Console port I connect to fxos admin and through to fabric but the commit-buffer command does not work. I am trying to change the mgmt IP from default to a new static. Can anyone hel...
Hi allWe have an FTD 1010 pair, in high availability, running version 7.0.3 and Snort 3 which is incorrectly classifying packets as malicious and blocking them. We have been advised to downgrade to Snort 2. Has anyone done this before on an HA pair? ...
Recently migrated from snort 2 to snort 3 and looking for best practice to maintain and review IPS policy. For example, in new snort 3 policy I no longer have the POLICY LAYER where I would go to view any NEW or MODIFIED rules from previous update. H...
Hi, so i just updated my FMC from FMC v 6.6.5 to FMC v 7.0.4.I check the troubleshooting file and it seems like there is a problem.I check the Post_Update_DBic and found this warning :[Wed Oct 5 19:42:38 2022][WARNING][missing eo reference] database ...
Hi so i updated my FMC from v 6.6.5 to FMC v 7.0.4. This update also updated my MonetDB version from v11.37.12 to MonetDB v 11.41.25. But after i did the update the FMC start not showing event, and when i look at the CLI it say database 'eventdb' has...
Hi,I have been trying to find where the setting is to limit the time that someone can use VPN using AnyConnect on a firepower 2110 appliance. For some reason i cannot find it or locate it and i want to disable the time limit. When someone connect wit...
I am looking to replace a FortiGate firewall which is currently working in transparent mode handling mutiple subnets with ASA 5515. Currently, I am testing transparent mode configuration on ASA 5505, and it will not forward any traffic that is not i...
Team, I need to upgrade the ASA FirePOWER and FMC to the latest release. Please find the current running image details below Running FMC: 6.2.3 (build 113)! Running ASA 5525 - 6.1.0 PLease provide me the FMC version suggested to upgrade and also the...
We recently had a security audit of our network carried out. One of the minor points raised was that ping responses were received from our firewall's public IP address (i.e. the outside interface) and this may allow an attacker to enumerate our netwo...
I have a pair of ASA 5585-x firewalls in HA mode - after a failover we are seeing VPN's comes becoming non-responsive up to 9hrs after failover. The investigation has indicated that the preshare key isn't be renegotiated when the lifetime counter tim...
So i have a network with topology that look like that. My palo alto firewalls are layer 3 device and in active-passive mode, while my Firepower NG-IPS are Layer 2 devices or transparent mode and in active-active mode. There's a scenario where lets s...
please i need an advice on what cisco firewall that can be used in marine(offsore vessel)
