Multiple users have recently reported connection slowness to an APP VM that they have access to through an FTD HA Pair in our Colo DC. After running a trace from their access switch to the server that sites behind the firewall, I noticed that while g...
Forum Posts
Dear members, To future proof our ASA 5506-X we would like to know whether it is wise we should upgrade this unit to a newer one or keep using it. https://www.cisco.com/c/nl_nl/support/security/asa-5506-x-firepower-services/model.html - can software ...
I am starting to mess around with Ansible to manage Cisco ASA devices. I am able to run asa_command or asa_config module from a playbook without issue, but if I want to just run a quick command, those modules aren't supported in ad-hoc commands. If...
Resolved! Cisco Anyconnect Trustpoint Certificate
I don't have an internal certificate authority nor do I have an external certificate for deployment available for Anyconnect VPN (Mobility Client Version 10) Is this a mandatory thing that i need to deploy an internal certificate authority to have th...
Hello,I have 887va that's connected and working but for some reason, i cannot ssh to cisco from wanI have access-class match in on vty 0 4 the access-list allowing ssh to cisco from lan subnet and remote static ipbut i when i try to ssh i have timeou...
Resolved! Firepower IP interface changes
Hello I have an Active/Passive setup on a couple of Firepower's and my ISP provider is pulling the rug out from underneath me and taking back their CIDR block. As a result, I have acquired a new ISP and have a new CIDR block. Will the Firepower all...
Good day.I have a pair of FTD 4115 HA somehow the HA FO link (e1/3) started to flapping w/ fault F0276 every few seconds (verified via API call and PING). Currently the HA is broken and primary unit is showing being disabled. This is a new deployment...
Has anyone ever implemented it on the Edge router/firewall? I put it about five (5) years ago, and never got any hit.Here is the link: https://team-cymru.org/Services/Bogons/fullbogons-ipv6.txt I thought it was useless back then, but I do not know no...
Hi, We are looking to migrate an old ASA 5585-X with multiple contexts to a FTD 4112. The challenge that we are facing is that the ASA use the same VLAN ID's and subnet for the outside interface, but on different contexts. Since we are now moving to ...
I currently have Adaptive Security Appliance Software Version 9.16(2)SSP Operating System Version 2.10(1.162)Device Manager Version 7.16(1)150 want to upgrade to the latest recommended version, sees thsi 9.16(2) IS HAVING LOTS OF ISSUES, checked on ...
Resolved! ASA certificate change
Need to change ASA certificate in ASDM used for anyconnect VPN. The certificate is public CA signed one. Does changing certificate disconnects already connected anyconnect clients? ASA supports .cer or crt format?
Hi Teams, My customer is using FTD 2100 series inline mode like picture1. [picture1] In this situation, my customer want to extend one more interface like picture2. [picture2] In this situation, I will configure Etherchannel in 2 points(FTD's ...
Hi all, Recently my company has acquired some a few Firepower 1120 security appliances and a firepower management VM for use at our various branch offices.I am trying to configure a route-based site-to-site IPsec tunnel between a pair of them within ...
We are preparing for the Software upgrade path for the FMC4500 and FP8360: Version 6.4.0.14 ->7.0.1.During the same maintenance window, we would like to install BIOS and Firmware Hotfix for FMC Hardware. Please advise if we meet the requirements for ...
Hello, I am having an issue register two new FTD devices (4112-X) to FMC. I see the following output when running pigtail on the FTD. MSGS: 07-04 10:00:35 firepower SF-IMS[50075]: [87506] sftunneld:sf_peers [INFO] Peer 10.66.0.55 needs a single con...
