Network Security

Resolved! Firepower 4110 FTD Hardware Bypass

Hi Community, “Hardware Bypass is not supported in high availability mode.”https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html Doe...

Resolved! FirePower 1120 FMC vs FDM

I am migrating a customer from an ASA 5505 to a FirePower 1120 with IPS and AMP services. I have a few questions about the onboard device manager vs the management center. The ASA config is not terribly complicated - it has a single static route for ...

How to import PKI certificate from flash using the import url command?

I was able to import a PKI trustpoint using the crypto pki trustpool import terminal command and copy and paste the pem file. However, when I try to import the same file from flash:. I get an error: (config)#crypto pki trustpool import url flash:myce...

ASA 5510 all Ports down after upgrade to 9.1.7

Hello,we have a strange problem with an ASA5510:After an update to version 9.1.7 all ports are down.What we have done exactly:We were on version 8.3, first updated to version 9.0 and then to 9.1.7. After that everything was ok.After that we had to re...

Install Firepower on Cisco ASA 5525X

Hello guys, i am facing an issue during migration of ASA into Firepower. I was able to install the boot image but during installation of the system software i met this problem. Starting upgrade process ...Populating new system imageUpgrade failed for...

Cisco ASA 5506-X with SFR - cannot ping or ssh, access VPN or run a traceroute externally

Hi All, I seem to be having configuration problems accessing the ASA on the above services from the Internet. When running a traceroute I am unable to see all hopsTracing route to one.one.one.one [1.1.1.1]over a maximum of 30 hops:1 * * * Request ti...

Resolved! MACSEC configuration on Nexus 7004 (N7K-F348XP-25) card

Hi All, Can someone confirm, is there macsec configuration supported on Nexus 7004 (N7K-F348XP-25 LAN Card) and is it require any licence to activate? Thanks,Darshan

Does FTD Image support Active/Active ?

Hi Team, Does FTD Image support Active/ Active High Availability ? Thanks,Akshatha

Microsoft 2016 Server VPN

We are rolling out a Microsoft 2016 VPN Server to replace our Cisco AnyConnect (various reasons why).The issue we are hitting is that PPTP and SSTP VPNs connect with no issue, but we want to use L2TP which isnt hitting the server.We believe the ASA i...

CCL Encryption

I need to do a packet capture on the CCL traffic to find out the source/destination of the packets that still using the CCL links.Does the ASA encrypt all CCL traffic? If I SPAN the CCL link (connected to a Nexus Switch) and connect a laptop running ...

Resolved! Purchased Authorization Key for Botnet Traffic Filter but afraid to put it on becuase key sasy Anyconnect Essentials is Disabled

Have two ASA5525X's. Tried opening a ticket with TAC but as soon as I click open new case it does a few redirects and then logs me out of Cisco SSO. Purchased the Botnet Traffic Filter. Went through the annoying and convoluted process to go through ...

Resolved! How to do Site to Site VPN in FTD evaluation period ?

Hello There I installed FTD on my vMware workstation, the problem is when I create Site to Site Vpn ,during deployment below error will appearError: Strong crypto (i.e encryption algorithm greater than DES ) for VPN topology vpn is not supported. Thi...

Resolved! How to allow *.website in ASA

HelloWe are on ASA 9.8 https://docs.microsoft.com/en-us/previous-versions/system-center/configuration-manager-2007/bb693717(v=technet.10)?redirectedfrom=MSDN We have a requirement to allow all microsoft updates through ASA. How can this be achieved? ...

Access internal web server via the public IP address from internal network

I have the internal web server 10.xx4 and NAT to the internet with the publix IP 103.xxx, how can the internal user network of the 10.xxx network access the web site through the public IP 103.xxx not over internal IP? Thank !

Firepower 7010.EXPERT menu after restore.

Good morning!!! I need you help again!So what i have:FMC 6.1.0.2 (build 57)And I resrored OS from Resore image to my 7010 (Cisco Fire Linux OS v6.1.0 (build 37))But I have problem. I do not have EXPERT mode on my 7010, so i can not connect it to my F...

Network Security

Forum Posts

Resolved! Firepower 4110 FTD Hardware Bypass

Resolved! FirePower 1120 FMC vs FDM

How to import PKI certificate from flash using the import url command?

ASA 5510 all Ports down after upgrade to 9.1.7

Install Firepower on Cisco ASA 5525X

Cisco ASA 5506-X with SFR - cannot ping or ssh, access VPN or run a traceroute externally

Resolved! MACSEC configuration on Nexus 7004 (N7K-F348XP-25) card

Does FTD Image support Active/Active ?

Microsoft 2016 Server VPN

CCL Encryption

Resolved! Purchased Authorization Key for Botnet Traffic Filter but afraid to put it on becuase key sasy Anyconnect Essentials is Disabled

Resolved! How to do Site to Site VPN in FTD evaluation period ?

Resolved! How to allow *.website in ASA

Access internal web server via the public IP address from internal network

Firepower 7010.EXPERT menu after restore.

Hearty congratulations to the December Spotlight Award winners!

Renew.cisco.com just got refreshed, and it will make your life easier!

Announcing Resources That Guide You to Success

Firepower 7.2.1 - Issue with the FlexConfig Text object override

Re: FMC is disabled in System>Health>Monitor

Private VLAN's interaction with ESXi and firewall

Packets appearing in ASP DROP?

What is PID when we try to integrate with Cisco API's

MSS clamping IPSEC tunnel -ASA

vFMC setting with bugsssss

FMCv upgrade path from v7.1.0

FMC new local admin cannot console or SSH

FMC API - can not associate a prefilter policy to an access policy