Anybody out there using this with good results? I have been messing with it for almost a year now and it seems like it's just not ready for prime time. I have tried with ASA firepower services (6.x, 7.0.x) and now with FTD (7.0, 7.1) and it is cons...
Forum Posts
Resolved! Replace FTD 2120 with 2110 using fmc
I currently have a cisco ftd 2120 that is managed by FMC, and I would like to replace it with a 2110, and then add a 2nd 2110 for HA. I have added HA to FTD's in FMC before so that is not an issue, however I have not replaced a 2120 with a 2110 and ...
Hi Guys,We are using an ASA firewall and last night ASA blocked "Shun" few of our customers' peer IPs. We have done a clear shun and that has permitted the peer IP again on FW. Could you please advise me as to what may be the reason for this unexpect...
Resolved! RAVPN for FTD
Hello everyone, I deployed a Cisco FTD using FDM and enabled VPN access to our internal network. I proceeded step by step, initiating with enabling smart license VPN. I'm using local identity as a user logon, an internal certificate, split tunneling...
Hello,I have register FTD to remotly FMC but when i try to deploy anything failed, show this before deployment:Warning: The changes to Virtual Routers may cause traffic discruption. And start the deployment like 37% and failed.Any ideas about this p...
Hi Team,We have primary and secondary FMC, primary was rebooted due to CPU issue and after which we are unable to see any connection events or intrusion events in primary FMC, after switching back the Peer roles we are able to see events on secondary...
Hello,Recent upgrade to new FTD 7.x and with that snort 2 to snort 3. I noticed that there are over 100 rules that have not been migrated. The message i'm seeing is: Rule Overrides Rules migration skipped for 100 rule/s with missing Snort2-Snort3 rul...
So I adopted a Firepower deployment from the predecessor. The current Firepower appliance (4112) has two instances configured, all managed through FMC. I want to remove a physical interface from one instance and then add it to the other. I have tried...
Resolved! snmp auth failure on a switch?
every now and then i see this message on my core? is it some kind of attack? %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host X.X.X.X
Hi,I have deployed Cisco FTD virtual and FMC in AWS EC2 instance and it is up and running.I wanted to know how to connect a PC or a vpc to the FTD and test the firewall.Please let me know how to test the Cisco FTD running in the aws instance.Thanks.
What is the best practice when monitoring Cisco ASA Firewalls (ASA5525-X or FPR1120-ASA) configured in Active/Standby or Active/Active HA? If we configure them as separate hosts in our SNMP software using their interface IPs, everything is fine till ...
Team, I researched about this and couldn't find a straight forward answer for this. Is there a simple OID to poll which firewall hardware unit in a firewall failover pair is Active and which one is standby? I found OIDs to poll the state of the firew...
Hi,I recently had to migrate a FTD HA (tow FTD2130) from one FMC to a new one.I installed the FMC in the exact Version and restored a five day old backup from the OLD FMC to the NEW FMC.Everything was the same from the MGMT IP of the FTDs (10.0.0.x/2...
Resolved! Deploy Multiple FMCv
Hi, We have 2 office sites (HQ and a remote site), each site have two FTD devices and we have purchased a single FMCv (VMware) for 10 devices. My question is, is it possible to deploy FMCv (not cloning, since not supported) for each sites (1 on HQ an...
Resolved! Management Vlan configuration!
Hello all,I want to configure management vlan for all the devices on network: router, FW and SW.The topology ist as below:Internet---Router---ASA--subint,10,12,13,30--2960SW---PC(on access port vlan10)I did the below configuration:1. create subinterf...
