Hello Team! I got a Cisco FTD cluster (managed by Cisco FMC) deployed in Azure. I have configured loadbalancer so that the traffic is evenly balanced between the two FTDv devices because there is no concept of HA in Azure. The loadbalance are probing...
Forum Posts
Dear Support, I would like to open a new case about this subject because I have to put over 1500 objects (url, network, host, range) into an FMC (v 6.2.2). The goal is to migrate from an ASA cluster to a Firepower 9300 cluster. And for that, I us...
Hi all, I my firewall (Firewpower) in the G0/0 I configured the interface 192.168.100.250/24, this is directly connected do my router 192.168.100.245/24 , from the Firewall I can ping my interface but I cant ping the ip from the router, I also tried ...
In the process of RMAing a 5508 that was running FTD code and wondering what the best way to replace it would be. The device was previously managed over a vpn tunnel and the management interface was used (used registration code and nat-id which I ha...
I want to replace an ASA5505 which is connected to a Trunk Port on a Cat 3750. The FP1010 runs SSP Operating System Version 2.10(1.162), and Cisco Adaptive Security Appliance Software Version 9.16(2) on top. 5505:interface Ethernet0/0 switchport tru...
Hi all, My organisation shared some hardening points for Cisco ASA firewall and wants to implement them. Basically i need to know the impact of that command in production environment. 1) Point : Ensure 'noproxyarp' is enabled for untrusted interfaces...
Hi Alls, I have a question when I try to connect 2 group of redundancy Firewall as picture below. I never try before. Is it possible to connect like picture and what I need to configure in both side? Thanks in advance, and have a very nice day!
Can I use syslog for collecting connection events [eg. Connection event, IPS event, SI event, Malware event etc] instead of eStreamer ? Are there any connection log events that may be missed if I use syslog ?My understanding is that the FMC/estreamer...
Hi , can anyone please help to advise how to renew cisco asa v9.12 remote access vpn (ipsec) certificate through asdm? we use certificate to do vpn authentication, now certificate on asa is expired, need to renew, thanks in advance.
Resolved! Cisco FTD interfaces monitoring
Hello Team, I got two Cisco FTDs being managed by Cisco FMC. I'm looking for a way to monitor the interfaces (inside and outside) of both FTDs when there is change in their status i.e. Up, Down, when there is no traffic passing through them etc. I ...
Hi guys, Can someone point me to recommended ASA version for ASA 5555, as I don't see any version being starred in the download section? Thanks a lot!Milos
We have existing tunnels and we were told that a new tunnel has to be FIPS enabled. If we turn on FIPS, do the existing tunnels need to be rebuilt?
I believe I understand the purpose and function of the command. For example, in our network we have it set to 15 minutes, and then it will erase the MAC from that port. If I connect a computer on port X, and it works before going home but I leave it ...
Hi, I have the IP Phone and Laptop connected to the same switch port. Although I use the authentication host-mode multi-domain command I have a security violation error: %AUTHMGR-5-SECURITY_VIOLATION: Security violation on the interface Fa0/15, new...
Hi,I am in a challenging situation where I need to utilize the 2 interfaces belonging to same network /same vlan. I fully understand that Firepower is not designed for switching purposes but still taking the opportunity to ask here if there is a way ...
