Cisco AnyConnect not able to login via SAML integration. The login is successful when using the browser through the outside interface domain but while using client VPN, there is timeout after blank screen. How to fix this?
Forum Posts
I have an ASA-5508-X, running FTD, controlled by a vFMC device. Both are running 6.2.2 software. It is partly implemented.I want to set this up to serve Anyconnect clients, and I want SSL inspection. My understanding is that both of these things will...
If failover and data link goes down on active device.Failover will happen or not.
Still learning so bear with me. I have 2 VLANs so far. For vlan 1, I would like it use DNS server 1, and for Vlan 2, I would like it to use DNS server 2. Purpose being is Vlan 1 runs Active Directory so it needs to serve as the DNS for that netwo...
Resolved! Integrating FMC with ISE
Hi; I have a test lab and want to integrate FMC 6.2.2.81 with ISE 2.2 (patch 5). Also I have an Internal MS CA server and have imported the CA root certificate into ISE and FMC already. Now I want to generate CSR of FMC to get a FMC Server Certifica...
Resolved! Cisco FTD URL Filtering rule issues
Dear All, we've installed two 2130 FTDs in HA, managed with FMCv, we've configured a rule to block facebook & Youtube. on the Application tab we've selected HTTP & HTTPS plus on the URL tab we've added facebook.com & youtube.com urls. but the traff...
Resolved! New WAN outside interface doesn't work!
Hello,At my work we have buy new wan connection.The topology isSW_Core ----->FTD---->Outside wan1-2-3in the SW_Core are 3 vlan:WAN1 WAN2 WAN3 From the FTD, WAN1 ----> can ping wan1 gwWAN2 ---> can ping wan2 gwWAN3 ---> cannot ping wan3 gw.and i don'...
Hello, I have 2 x FPR2110-ASA-K9 and I'm trying to set up an active/standby state between them but unfortunately I face a lot of issues. Versions : Cisco Adaptive Security Appliance Software Version 9.8(2) Firepower Extensible Operating System Versio...
Hi All,I need assistance to login using my FDM GUI. Output below are on waiting state. I can access firewall through CLI. Refer screenshot of the login page with error. root@rg-firepower-fw:/home/admin# pmtool status | grep -i waitingTSS_Daemon (norm...
I've got a FMCv in the lab and am attempting to upgrade from 7.2.0.1-12 to 7.2.1-40, however it is failing the upload from the workstation to the server. Product Updates, Upload Update, choose file and click upload. It goes through the motions and ...
Resolved! Port security shows disabled in 9400
Hi,After configuring the port security on the interface and run Switch1#show port-security interface Te1/0/1 Port Security : Disabled Port Status : Secure-down Violation Mode : Restrict Aging Time : 2 mins Aging Type : Absolute SecureStatic Address ...
Hello Everyone,I have a quick question that will likely be a no brainer for most of you. I have a Cisco ASA that needs to Log all allowed traffic to a logging host. There are currently 3 logging hosts on the Configured and I would prefer to only send...
I seem to be doing something wrong with inheritance settings based off parent ACP. In the attached screenshots you can see what I am trying to do is establish mandatory Geo and URL block rules for all sub FTD policies to inherit. However it appears w...
Resolved! Configure external access
If I have a customer who co-locates on my network with a couple of servers and I configure a subnet, what's the best way to allow them access via teamviewer or similar just to their particular servers and no other devices on my network?So, it would l...
Can Firepower identify traffics for routing protocol such as BGP and OSPF? I want to bypass BGP and OSPF traffics to boost my firepower performance. Thank you.
