After upgrading the FMC 4600 to version 7.6.2, an error appeared related to connectivity with Cisco Cloud. TAC recommended a workaround by enabling Cisco Success Network. Approximately 24 hours later, the initial error cleared; however, a new error a...
Forum Posts
Hi to all,i am wondering if i can configure FTD with loose RPF instead of strict RPF which (i suppose) that is currently running.I am getting a whole lot of syslog messages with id 106016: Deny IP spoof from (194.x.y.z) to "My GW IP" on interface vla...
Resolved! FTD Etherchannel/LACP question
Hello, I have a FTD 1010 in my home lab that's using 1 routed interface for outside and the rest of the interfaces are used as switchports on a VLAN that I use for the Inside. Now I also have a Synology NAS with two interfaces that can be bond toge...
Resolved! Patch upgrade to 7.6.2.1
Hi everyone! I just need to verify if I am on the right track. I am planning to upgrade our Cisco vFMC and its 4 managed vFTDs from 7.2.9 to 7.6.2.1I am aware of the upgrade path for the major version. I am somehow hesitant with my knowledge for the...
Hello Team,I have fmc managind two physical ftd 2130 on my primary DC. I have two more 2130 ftds on my DR to be managed by the same fmc.Am looking to copy/push configs from ftds in primary to secondary, especially the ipsec vpn tunnels. Is there a wa...
Resolved! Embedded Linux OS
Hi.Will my Cisco products (those that are under support) be solely responsible by Cisco on the CVEs patches if Cisco is using end of support embedded Linux OS?
Hi All,I’m converting an FTD code to ASA on a Firepower 1140. I downloaded the ASA image via USB and have console access, but when I try to install it, I get an “invalid version” error - as per attached images. Can you help me identify what I might b...
Hi, we store our backups to a remote storage via sftp. It's possible to do this with SSH public/private keys. The FMC default uses ssh-rsa key for root@firepower which is stored in /etc/ssh on the filesystem. The remote server doesn't accept rsa keyp...
Hello, I want to convert a FTD from routed to transparent mode and put it behind a router. Today I use the data/outside interface to manage this FTD from a FMC in another location. Since the FTD does not have a static IP, I use a dynamic DNS service ...
Afternoon all, Recently we onboarded an FTD 1010 to cdFMC for cloud management. The management of the FTD (by cdFMC) is via is external data interface. There was a request to change the external IP address and therefore the routing table to a new ne...
Hi,While waiting for Cisco TAC to analyze all the troubleshoot info and core dumps I want to warn the community about yet another fun experience while updating Cisco firewalls. We had to update our FTDs running 7.4.2.2 which ran fine for months due t...
We would like to configure logging and NetFlow on our Cisco Firepower 1120 Threat Defense firewall. However, we are unable to locate the NetFlow configuration options in both the Firepower Device Manager (FDM) Web UI and CLI interfaces. The firew...
I have a FMC and HA FTD on HA mode version 7.3.1for both. The DNs server is connected via INSIDE interface only. The Firepower can ping the DNS server as shown below, but the DNS is failed. I configured the DNS and domainsearch. The DNS is not resolv...
Can anyone tell me about the solution for this error? I updated my FTD 2110 from 7.0.1 to 7.4.1 via FDM and after the update added my FTD into FMC (my FMC was working ok before i added FTD into it) now i am getting this license error on my FMC. any s...
Hi, I have a FPR4K-SM-24S with multiple local usernames configured with passwords. If I change the default values on the password policy, will that affect the passwords that are already configured?STIG checklists require:Min leangth 15upper 1lower 1n...
