Hi, We have a set of FTDs and using FDM for management. Found some answer about the Variable Set being the feature not available in FDM. However, I am hoping that someone can recommend a smoother workaround to create it there besides the FlexConfig...
Forum Posts
Hi, I want to perform a migration from vFMC to FMC Appliance in HA. Will there be any traffic downtime during the migration process, and what are the best practices? Thanks
Hi Team, kindly need you info regarding this Error that showed up after Optimize ACL, Object , etc BLOCKED : OSPF Configuration already exists on the FMC. Please disable OSPF on the FMC before proceeding with the Migration what causing this issue...
generally , in one static 1 to 1 NAT the output of show xlate shows as below right .ham-vpn-fw/ham-vpn-fw# sh xlate | in 172.20.164.139 NAT from outside:10.90.0.18 to cbtsmgmt:172.20.164.139 ham-vpn-fw/ham-vpn-fw#but in one of my case showing as bel...
Hi to all,my topology is like the following:subnet A --> R1 <-----Internet--> Edge Router <----> FTD<---> Various VLANs in the inside ZoneBetween R1 and FTD runs an IPSec VPN. Internet connectivity is provided by the Edge router. What is not clear to...
Does anyone know how to configure a Pre Logon Banner on a FTD non FMC managed running code 7.x?I can't see that it is at all possible. The CLI won't let you write any change out regarding a banner. The API explorer has no option and the GUI menu also...
I'm new to using cdFMC and planning to add two FTDs configured for high availability. What are the recommended interfaces for management? Should I use a data interface for management purposes on both firewalls (two public IP addresses)? Additionally,...
I went to update a pair of FPR1140 that are in HA yesterday using FDM. I had read conflicting instructions online. Ciscos instructions were saying log on to the standby unit (which i cant as its in HA) so I went with some other instructions that sai...
Hi All,I've asked a question a few days ago on this 4 year old post but unsurprisingly haven't had any response so starting a new post. We had a requirement to allow wildcard access to a remote SQL server over tcp/1433, as the host portion of the des...
Resolved! ASA boot/console logs to file
I'm planning to update the ASA and ROMMON software on a ISA3000. I've tested it in our lab first and during the testing I've been connected through the console port. This is nice as I can see what is going on during the reload processes. However, whe...
Hello Community,I have Active Directory successfully integrated with FMC.My goal is to apply a Dynamic Access Policy (DAP) to my FTD, where the DAP should match a specific Active Directory group and apply a corresponding access policy (for example, A...
These are the 2 documentations that we followed to ingest Cisco device syslog into our Sentinel instance: https://learn.microsoft.com/en-us/azure/sentinel/forward-syslog-monitor-agenteStreamer eNcore for Sentinel Operations Guide v4.0.9 - Cisco Issue...
Hi All, How can I solve this flexconfig error for "access-group". My FMC version is 7.7.10 & the FTD devices (in high availability) version is 7.6.1Thanks.Nakpane
Resolved! FPR 2130: Troubleshooting ASP Drops
Hello, We have an FPR-2130 pair (Active - Standby) and I recently see increased ASP Drops (see attached image). It is supposed to be "Flow Denied by access rule, Flow Denied by configured rule".We need to understand better what this is about.How can ...
Is there a way to recover the credentials for an FMCv300? The individual who managed the FTDs/FMC left the organization and the folks that are supposed to now manage the environment cannot find the FMC credentials.
