I have 2 FMC devices in a HA pair. They are currently running 6.1.0.6 and I am looking to update them to 6.4.0 before upgrading them further to the latest release.The 'upgrade readiness check' does not work from the GUI even when the HA is in a pause...
Forum Posts
Hi friendsMy question may seem a little simple!I've configured my asr 1002-x router for web-based authentication (Authentication Proxy).but whenever I type router's IP address in browser, the webui page appears and I don't see the authentication prox...
Hello Guys on FMC , Connection/Analysis/connection/events , i cant see the denied action , only see what allow in the policy , how can i lookup the denied actions thanks
HELP!After a failed initial setup, FPR-1010 (6.4.0-102) refuses to connect to Internet (and console shows flipping every 10 seconds between UP and DOWN). ISP provides public listed address on an ASA5505 no problem but the FPR refuses to connect.I did...
Resolved! ACL ON CISCO ASA Firewall
Hello Gurus,i need a clear solution am publishing a new internal hosted API server in the networked, the server is to be accessed outside publicly via port 1000 and via https.kindly advise on the object rule and ACL configuration for this requirement...
Hello Guys, Following are basics, but I'm new to the FTD/FMC, just have a quick questions: I've FTD 4100 series managed by FMC. FTD image is used on FP4100. 1. How can i do ping test from the firewall.Is it through FMC or FTD?CLI/GUI? 2. If i'm cre...
Need help with a NAT configuration on a Firepower 1140. I have a NAT rule in place when using 'sho nat translate' I get the following output: show nat translate 192.168.x.xManual NAT Policies (Section 1)3 (inside) to (outside_spectrum) source static...
I'm trying to copy a set of DAP policies from one ASA to another. When I tried to upload the dap.xml file, the ASDM rejected it saying it was a special system file. When I try to manually reconstruct the rules, nothing shows up for LDAP groups. Just ...
Resolved! FTDv management access
HiDo you ever come across a product you really don't like from the off? FTD is it for me. For years we do "show ip int brief" Whoever is in charge of FTD decides it's "show interface ip brief"Anyway, I have deployed a FTDv in an ESXi environment a...
inside 192.168.1.1/24------FTD-----Outside -71.x.x.2/24 ------71.x.x.1 (Gw)Mail - 192.168.1.2 -----------------71.x.x.3/24(Public)ns2 - 192.168.1.3 -----------------71.x.x.4/24(Public)www - 192.168.1.4 -----------------71.x.x.5/24(Public)I m having c...
Hi, I'm getting invalid credentials error while trying to connect integrate the FMC with my AD for external authentication. The exact error is:Opening connection to LDAP server - 10.20.20.10:389 - cn=user,dc=domain,dc=localCurrent TLS Require Cert: 0...
Resolved! Firepower issues
Hi all I m having strange issues with my FTD. I am managing it from FDM as I don't have FMC. I am Seeing strange behavior. I have deleted all the rules NAT and ACP . But my Clients Still getting internet. This is what I get from the command line. Th...
Resolved! Is unregistered FTD still functional?
Hello all,We have a FTD A/P pair registered after purchase. They are working well until last month. They have lost the licenses without reason and became unregistered.This is the first time I met after more than ten years pratices on Cisco devices.I'...
Resolved! ASA-5508 Throughput
I have 2 ASA-5508's in an Active/Passive configuration. My question is that I have a new 2Gbps internet circuit. Can I use port-channels to get more throughput? I have a Cisco switch with some mGig ports, so I was thinking I can terminate the circuit...
Hello all,There are two L2L vpns to 2 different partners configured on the same Cisco ISR4331 router. Now, beside the other traffic (to the lan of ISR4331), the 2 partners needs to communicate to each other like PartnerA -L2L-> ISR4331 -L2L-> Partne...
