I have a Cisco FTD managed by FDM, when setting up Remote Access VPN I can only select one outside interface from Global Settings, I have two ISPs and I want to publish the VPN on both outside interfaces, is this even possible with FTD? I'm really st...
Forum Posts
Hi Guys, I am trying to build firewall rules based from the data collected from our Syslog servers. Problem is our firewall ASA 5516-X is unable to display the catch all rules in our syslog. We usually filter the Catch All logs (permit IP any any) us...
Hi, I would like identify each node that is sending out syslog. Currently the FMC is configured in the Device platform to use the hostname.I've read the following in a number of Cluster documents :- "If you configure logging to use the local-node nam...
When we enable FIPS on our Nexus 93180LC-EX after reload we are unable to SSH into the box. We have to console into the box and remove the FIPS command in order to get back into the box via SSH. Has anyone else experienced this issue before? Are we...
I got below vulnerability in one of the FTD 2110 configured as Transparent Firewall Vulnerability :: SSH Server CBC Mode Ciphers Enabled. The SSH server is configured to support Cipher Block Chaining (CBC) encryption. This may allow an attacker to re...
Hello our switch Cisco WS-C2960L-SM-24PS has this vulnerability and the recommended solution to this is to obtain new SHA-2 signed SSL/TLS certificates to avoid web browser SSL/TLS certificate warnings. Can you please guide me on how to do this or su...
Resolved! Macsec frames being blocked - Bypass?
Hi all, hope to find everyone wellI'm currently having an issue where I have two switches Catalyst 9300 connected to each other via two radios (little image exemplifying the connection) but I'm having issues applying MACSec between both switches. I w...
Hello Fellows, I need your suggestion before moving forward with the migration Tool use. 1) I have existing FTD running in FMC 2600. I am planning to add new FTD on same FMC, if i start migrating ASA config to new FTD, will it create new ACP or prefi...
Hello So, I wanted to figure something out here. Currently I have an ASA-5508-X w/ Static WAN IP. I have PAT to LAN 192.168.1.0 Subnet which connects to L2 Switch.. Plug N' Play in a sense. Whatever I plug it, it has always grabbed it's unique IP add...
Helping on a project that has a simple requirement — to lock down our switches and routers to have 2FA for administrator access. But, we’re out of our element on implementing this – and could use advice. We do not have any sort of directory right no...
The management interface of my FPR1010 running 7.0.1.1 managed via FMC responds to HTTPS (tcp 443). Any reason for this? I've tried to change platform settings, but platform settings do not apply to the management interface. There are 2 problems:It r...
Resolved! Meraki MX Aggregate Port
Hi Guys,Anybody here knows if Meraki MX firewalls supports aggregated ports? How can I configure it?Thank you.
Dear Team, there is a requirement that need to have static NAT between two sites.in both sites there will be multiple hosts and on a static NAT there is used only one single IP so,e.g LAN1 IPs 192.168.1.1, 192.168.1.2, 192.168.1.3 these IPs will be n...
Resolved! Adding Firepower To FMC Issue
Hello I installed 6.2.2 FMC and 6.2.2 on a 5516x. When I got to add the firepower module to FMC it says failed to register (update devices failed). I working on this now and need it back and running. Can you please assist.
We have a pair of 1140 FTDs that are managed by a physical FMC. The UPS failed today, and consequently the FTDs lost power. Upon bootup, the secondary is showing healthy by the FMC and having a mate, but the primary is showing offline. I can ping the...
