Can you suggest best practice for it? Can you suggest some disadvantages of enabling it on internal or external interfaces?
Forum Posts
We currently run an FMC environment that manages a pair of Firepower 2100 FTD appliances. WE recently upgraded the FMC to Version 7.4.2.1 from 7.4.2, and we were planning to do the same for the FTD, which are also running 7.4.2. However, now that t...
Hi all,I have the following configuration on AWS Cloud using Gateway load balancer:GWLB endpoint -> GWLB (geneve protocol) -> inside interface Cisco ASAv (version 9.22) -> outside interface Cisco ASAv -> InternetNVE 1 configuration:nve 1 encapsulatio...
Hello,I am trying to register a ASAv 9.18(4)53 to a Cisco SSM On-Prem Smart Licensing Server. On the ASA I get the following error:%ASA-6-120003: Call-Home is processing license event Smart Licensing. %ASA-6-725001: Starting SSL handshake with server...
hi allis there any way to send email notification if TID matches? I looked at Security Intelligence on correlation tab ,but could not find appropriate option to do that. What I want is that if some of the users entered a link which is observable of ...
802.1x on our network is working on the majority of VTCs, however, it seems that the Cisco Room Kit (EQ, Plus etc...) are not working. 802.1x Authentication enabled, use client cert enabled, capf cert pushed etc...A pcap on the switch port shows EAPO...
We have a setup with two FTDs running in High Availability (HA) on separate Firepower chassis in a Multi-Instance environment. I'm trying to create a new sub-interface on a port-channel from FMC, but the interface is not appearing in the FMC UI. A...
We recently upgraded our FMC to version 7.4.2 and then 7.4.2.1, and I noticed in the release notes that they have added an IP Package Download option under the GeoLocation Updates tab in Content Updates. In the release notes for 7.4.2, they mention ...
Resolved! Does FPR1010 base box support SSL VPN ?
Hi Team, Does FPR1010 base box support SSL VPN , if yes how many qty? Thanks,Akshatha
I am trying to connect a pair of Cisco 4120 Firepowers, each running a single ASA in multiple context mode. The Primary chassis is configured while the Secondary chassis has been wiped.Following Sheraz.Salim's advice, I set logging console 7 on the ...
I have FMC4600. I realized that it cannot pick commands on the cli. I can access, type commands and even clear, but for some unknown reasons, when I press enter, nothing happens. Interestingly, pressing enter without any command enters new line, cle...
Hi All, We have a cisco FMC 4500, it has multiple management interfaces that we can use. Due to some restraints on mgmt zone, we need to ensure the device management traffic is done through a separate interface (lets say eth1) and the FMC uses anothe...
Resolved! FTD avpairs for CLI access
What is the FTD avpair configuration required when trying to setup radius with ISE and FTD cli access? I am getting an accept-accept in the live logs but users ssh session closes automatically..
Dear community, Based on the research I have done, seems that I can install either FDM or FMC virtual on VMWARE. But the Virtual environment that I currently have available is Hyper-V. So I want to check if you know any option on installing FMC Virt...
Resolved! school network
i need help with a school network ive got alot of it done i just need help with the firewalls, i cant figure them out i need asa https://www.geeksforgeeks.org/basic-firewall-configuration-in-cisco-packet-tracer/ this one and dmz pls help thanks!
