I ran into this yesterday. I have a pair of 3120 chassis, both configured the same with 3 instances, one is an HA pair, the other 4 independent IPS FTD. One chassis, no issues making changes and saving, the other, if I try to modify one of the inst...
Forum Posts
Hi All, I have migrated ftd from onprem fmc to cdfmc selecting the option retain logs on onprem during migration. However post successful migration there's a attach message. Can anyone help me is it because logs retain on on prem and it will auto com...
Hello, We have a customer who is running their perimeter firewalls in Active Passive failover. The firewalls in single context mode. I have the below queries regarding the Mac address that will be used by the primary unit. 1. What will be the MAC a...
Resolved! L2TP on ASA software image on FPR1150
Hi Community, I am looking for step by step guide to configure L2TP VPN on FPR1150 with ASA image on it.Also what will be prerequisite?Is it only possible over IPsec VPN?
Resolved! Re image FPR1150 from FTD to ASA
Hi,Do we have migration tool for re-image FPR from FTD to ASA?Is there any issue with supported OS?what are the prerequisite?
I need to provide our Security Team a list of the contents (Countries or Continents Selected) of Geolocation Objects I've created via the FMC's GUI. Can it be done via cli so I can format it in a presentable form?
Currently trying to achieve said thing. I tried different inputs in the destination field like any or 0.0.0.0/32 but it's not taking it.What's the trick here to achieve this? Kind regards
Hello everyone,I'm having trouble registering my FMC with Smart Licensing because it's on a segmented network with no direct internet access. I've added a secondary NIC (eth1) with internet connectivity, but I cannot find in the FMC's any interface ...
I need your valuable hints to find a solution to my problem. The clients must request a certificate to be able to use the network with dot1x using ISE.I have a Certificate Authority (CA) server on Windows 2019 (will upgrade soon to 2022). The Certifi...
Hi All,We have a Cisco 3110 secure firewall, and I'm not clear which mode to use: ASA or FTD. Since the appliance is used for remote access VPN, any suggestions, please?Thanks
I am having an issue removing the UTD Signature of the Catalyst 8300. I'm not able to update it to a newer version. When I erase the memory and boot from a new IOS, the old UTD signature is still there. Is this a common issue? Is there a solution to ...
Hello, I was testing the FTD failover (version 7.4.2.1) for one of my customers yesterday. I mainly tested ICMP and HTTP downloads during the failover. My test process is as follows 1- Started a continuous ping to 8.8.8.8 2- Downloaded a large file ...
Resolved! IP Address Change - Virtual FMC
I am looking to change IP address of our FirePOWER Management Center which is virtual. I can see option to do this via the standard GUI but read conflicting info that I may need to ssh and also run some command line? Can anyone clear this up? Thanks
I'm trying to run the Firewall Migration Tool. When i install it, a popup appears that says "Your account requires multifactor authentication to add an additional layer of security when signing in to your account." I already have MFA configured in ...
Hi, on ASA there were possible to create service policy rule for some interface and apply QoS shaping for download/upload based on time of day schedule. We using it to limiting upload speed for exact subnets to not deplete whole capacity of line to W...
