Hi,I have ASA 55xx that im using as vpn concentrator.I have a need where one of SSL VPN clients needs to be able to go through IPSEC tunnel. Both configured on that same ASA both are functioning. I already have same-security-traffic permit intra-inte...
Forum Posts
I'm looking to provide guidance on router config, this I can do, been in networking for over a decade now. However, the one area where I'm less confident on though is in Security. Specifically, in the details of ciphers, hashes, and key exchange algo...
Is there a FMC API to get1) Realtime performance metrics for CPU/Memory/Disk. 2) Tunnel (VPN/Site-to-Site) performance metrics (e.g. latency, jitter, packet loss) managed on FTDs.Tried following APIs but no helpful to get intended output:/api/fmc_con...
Qualys scans of our FMC and FTD are flagging older SSH protocols and algorithms that we need to turn off. I looked into enabling UCAPL/CC mode but the one-way nature of this change kind of scares me. Besides, I feel like all I need is to tweak the ...
What would be the process and steps required to migrate URL filtering from a Smoothwall to a Cisco FTD which is already in place?
There are several ssl decrypt rulesRules for category - 3 do not work. And traffic is being decrypted.The main rule -6 informs that there are no categories in the rules -3. What's wrong?
Hi,We have FMC 7.4.2.1-30 and Firepower 1120/1150 with the same release. Every morning the FMC wants to deploy the following changes on all firewalls, although nothing has been edited on the FMC during the night:dns server-group DNS_Intranet no doma...
In Cisco FTD firewall, Do the multiple CUSTOMER VRF on our OUTSIDE use the same AS number? with reference documents
There is requirement of disabling SIP Alg as due to some issue in voice call which get disconnected after few minutes . It has been suggested to turn off SIP Alg in our Cisco Ftd firewalls . What would be the impact on traffic and how can I disable S...
Hello ASA 9.20 release (on FPR2100 device). I had a TAC case about TACACS+ Remote Address = 0.0.0.0 in certain Authentication Requests (when using public key auth, and also in Authorization requests) - the TAC told me to "no ssh stack ciscossh" - tha...
Resolved! FTD Reference Bandwidth
Hi all. Im trying to configure OSPF on a FTD firewall trought FMC. The idea is to tunning the Ref Bandwidth to be homologous on the nexus neighbor side. Reference bandwidth unit is 100 mbps Actually the Ref Bandwidth is by default on the FTD (7.4), i...
Resolved! FMC with Identity Policy using Azure AD
Hi All,We are currently running FMC and FTD with user identity access control polices. FMC is integrated with ISE, which in turn is integrated with our on-premises Microsoft Active Directing domain using WMI so that user to IP mappings can be passed ...
Hello Pros.How to fix vulnerability CVE 2025-20197 thru 20201 on Cisco 4300 Router and 9200 Switches. What IOS XE version will fix the vulnerabilities for a 4300 router and a 2900 switch. Thanks in advances.
I'm trying to test a FTD in AWS. I'm using the PAYG AMI (ami-04d7dfdc0d700e259). I assumed it would include the required licensing as it a PAYG. Fortinet, PAN, F5 etc include the licensing with their PAYG AMIs.When I try to add a new IKEv2 policy usi...
We have a ASAv in Azure that is only used for AnyConnect. We have a Site-to-Site between Azure and a Watchguard FW at our Colo. The tunnel is up but I can't get to anything in the Colo while connected to the Secure Client. I can get from Azure to the...
