Network Security

Resolved! FMC/FTD Realm Config - A.D. User 'rights' , minimum

good daywe had setup a Realm Config for A.D. <-> FMC sync....and i'm a bit unsure whether the 'svc-acct' that was made in AD actually 'needs' to be a Domain Admin member....or whether a bare minimum other Acct Privileges should be set instead. if any...

Restore backup on FMC 6.6

Hi felllows i'd like to restore a backup on a new FMC but dont turn off my old fmc. is it possible restore FMC backup with no changes on management ip address?

Dynamic Access Policy (DAP) for AnyConnect work around on FTD

We are in a testing phase with FTD. Currently, we use DAPs with ASA to control which users get certain Access lists when connecting with AnyConnect, and works well and is clean. I know that is not a feature in FTD yet (or maybe ever) but I was curi...

Cisco FTD SLOWLORIS DOS ATTACK VULNERABILITY

Hi guys, I hope you are doing well. Our infrastructure is now being audited by a third-party company. We have 6 FTDs in our infrastructure and they examined only one of them with a "Slowloris" or "Slow Http" vulnerability and not the other ones. All ...

FMC/FTD SSH Login with Key

Hi, is there any possibility to login at FMC/FTD with generated SSH keys?We generated a public/private key pair and placed the public one through expert mode on the FMC. It seems that FMC isnt using this method and we dont know how to change it.Any i...

How do I know what SNMP OID of Traps on FTD interface up / down, reboot?

Hi All, How do I know what SNMP OID of Traps on FTD 2140/4115 interface up / down and FTD reboot? Nicholas

Mandatory rule in FMC causes network breach.

Hello peers,I have a customer who discovered that their internal servers, ones that were NATed to a public IP address and had specific ports open for access from the internet, eg HTTPS or SMTP, were being bombarded by all sorts of internet traffic on...

Resolved! Remote Access VPN, user identity "Not Found" Using User Agent and unable to use ACP to control RAVPN traffic per user

When a user connects to the remote access VPN. The username in the connection logs shows as "Not Found" and I can't use ACP to control traffic. It use to work back in an earlier version from FMC 6.2, but since stopped working even with the latest rel...

Resolved! Making changes on the interfaces on the Secondary Standby FTD while Primary FTD is running

We have 2x 2120 Cisco FTDs(managed by FMC) in the DMZ. Primary/Active FTD has a single L3 link to EDGE 1 and Secondary/Standby FTD has a single L3 to EDGE-2 switch. We are planning to deploy VPC on the EDGE switches where each FTD is going to have t...

Resolved! FIREPOWER: Cisco Cloud Services error critical

Hi Gents, We just upgraded an HA Firepower (FTD) 4140 to 6.6.4 and the said alert keeps popping up.Although I've read where to disable this, problem is, this is a highly secure firewall and completely isolated, meaning no internet access at all.When ...

Resolved! Firepower Backup

Hi, our setup is;ASA 5555-x active passive HA pairFirepower module installedUsing FMC for FP management My question is, what is the best way to backup FP specifically for an upgrade project where I can easily restore FP if I have issues with the upgr...

hrtimer interrupt took ns

HI! I need help! I have a Cisco Asa 5585 Firepower in a vcenter (vmware 6.0) and I want to make a backup with Veeam Backup but when trying to make the backup I get an error message "processing error vddk error 14009" by veeam, which does not He lets ...

Security on SPAN port

HI Guys.Quick question Is it possible to create a SPAN port on a C9300 and configure port (monitoring) so it's not possible to sent data through it only recieving data? Thanks in advance /Jeppe

In FMC, can you bulk edit Access Control rules? (without the API)

If I create a new file or IPS policy and need to apply it to hundreds of Access Control Rules, is there a way to do this in bulk in the FMC interface or do I have to go one at a time through all the rules? I'm guessing that someone can code a way to...

Resolved! Possible to move standalone FTD to be managed by FMC?

Hello all,Is it possible to migrate a current FTD appliance that is a standalone device to be managed by FMC that's also currently in production? Or do I need to configure all the objects, NATs, rules, etc. on the FMC first then wipe the FTD and sta...

Network Security

Forum Posts

Resolved! FMC/FTD Realm Config - A.D. User 'rights' , minimum

Restore backup on FMC 6.6

Dynamic Access Policy (DAP) for AnyConnect work around on FTD

Cisco FTD SLOWLORIS DOS ATTACK VULNERABILITY

FMC/FTD SSH Login with Key

How do I know what SNMP OID of Traps on FTD interface up / down, reboot?

Mandatory rule in FMC causes network breach.

Resolved! Remote Access VPN, user identity "Not Found" Using User Agent and unable to use ACP to control RAVPN traffic per user

Resolved! Making changes on the interfaces on the Secondary Standby FTD while Primary FTD is running

Resolved! FIREPOWER: Cisco Cloud Services error critical

Resolved! Firepower Backup

hrtimer interrupt took ns

Security on SPAN port

In FMC, can you bulk edit Access Control rules? (without the API)

Resolved! Possible to move standalone FTD to be managed by FMC?

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

Knowledge Hub: Cisco Technology for Securing the Enterprise

Announcing Resources That Guide You to Success

configure SNMP inform retry and duration on FMC

FMC doesn't show all SGTs in Connection Log and Unified Events

exercicio

Cisco FTD portscan

ASA-AWS - EC2 IMDSv1 required for the PAYG license to be applied

Firepower 1000 port status blinking on the same time

FTD management interface not coming up after reimaging from ASA to FTD

Firepower 2120: 'configure user delete' causes 'Invalid target user'

Convert ASA from Multiple Context to Single Mode

FMC S2S route-based VPN - full mesh not available