We have 2x 2120 Cisco FTDs(managed by FMC) in the DMZ. Primary/Active FTD has a single L3 link to EDGE 1 and Secondary/Standby FTD has a single L3 to EDGE-2 switch. We are planning to deploy VPC on the EDGE switches where each FTD is going to have t...
Hi Gents, We just upgraded an HA Firepower (FTD) 4140 to 6.6.4 and the said alert keeps popping up.Although I've read where to disable this, problem is, this is a highly secure firewall and completely isolated, meaning no internet access at all.When ...
Hi, our setup is;ASA 5555-x active passive HA pairFirepower module installedUsing FMC for FP management My question is, what is the best way to backup FP specifically for an upgrade project where I can easily restore FP if I have issues with the upgr...
HI! I need help! I have a Cisco Asa 5585 Firepower in a vcenter (vmware 6.0) and I want to make a backup with Veeam Backup but when trying to make the backup I get an error message "processing error vddk error 14009" by veeam, which does not He lets ...
HI Guys.Quick question Is it possible to create a SPAN port on a C9300 and configure port (monitoring) so it's not possible to sent data through it only recieving data? Thanks in advance /Jeppe
If I create a new file or IPS policy and need to apply it to hundreds of Access Control Rules, is there a way to do this in bulk in the FMC interface or do I have to go one at a time through all the rules? I'm guessing that someone can code a way to...
Hello all,Is it possible to migrate a current FTD appliance that is a standalone device to be managed by FMC that's also currently in production? Or do I need to configure all the objects, NATs, rules, etc. on the FMC first then wipe the FTD and sta...
Hi Buddies, Could help me figure out what is the meaning of these logs in my router? I'm worried that this could harm my network. Thanks.
Would anyone be able to provide an example of an ansible yaml file with basic cmds under asa_config module, I have managed to get the asa_command module working. Connection from control node to ASA is via SSH.I have tried google but found nothing tha...
Hi, I'm researching my plan to install updates on our ASA 5555-xI can download the ASDM and Firepower modules direct from the Cisco website and the updates for the ASA aren't available. Can I download them from anywhere or will I need to contact a TA...
Hi,We noticed 'high CPU usage on the ASA 5555-X series firepower device. We checked the configuration and logs and there are no symptoms of CPU usages. Could someone please advise? Model : Cisco ASA5555-X Threat Defense (75) Version 6.6.1 (Build 91)C...
Running FMC 7.0.0-64, I have email notifications (Policies / Actions / Alerts / Intrusion Email) turned on for intrusion policies (Snort 3, if that makes any difference), and there are only a few of those notifications that are enabled (as set on Ema...
Hi I have RV340 Dual WAN Router and my firmware and I had the IPS switched on in the following mode when the router firmware was at firmware:1.0.03.20 <ips xmlns="http://cisco.com/ns/ciscosb/ips"><enabled>true</enabled><mode>prevention</mode><level>s...
Need assistance in identifying logs on cisco FMC. we occasionally receive advisories for malicious dns communication from our network. for eg:source ip dest ip app signature url 10.x.x.x 146.148.78.118 ssl C2 con...
Hello to all,I am migrating from virtual FMC to FMC 1600 and sf-migration.pl script is taking way too long.My backup from virtual FMC is nearly 46GB. I copied the file to the FMC 1600 and executed the script. After nearly 24 hours has not finished ye...
