Palo Alto has a function in their firewalls called policy optimizer that can identify applications seen in a port-based access rule and then convert those rules to application based. I have not seen anything equivalent in FTD, so what’s the best stra...
Hey guys. I posted a few months back about an FPR issue I was having. I had an inside interface 192.168.1.1 and my outside 100.1.1.1. No NAT. Not going out to the internet. I wasnt able to ping from outside in. So I made an acl:access-list OUT-IN ext...
Hello team, I have been searching for a document that indicates the information I need and I have not find it so I believe may find something from your knowledge as well. I have an FTD that is managed by a FMC. The FTD has a physical interface that h...
How do I configure a recently deployed FTD to use a Syslog server that is on the other side of a Site to Site VPN connecting that FTD back to our main office? The other network devices at that location are easily able to reach the syslog server, but...
I upgraded from 7.6 ( worked fine ) to 7.7 today. Lab gear so no impact, but this is a terribly buggy release. After an hour of making sure all of my browsers are up to date, clearing them out of cookies blah blah - the 7.7 GUI will work for a minute...
Hi Team, I'm trying to understand whether device running/startup-config will be erased after migrating Firepower 2110 from Platform to Appliance mode? or does it reset the FXOS config only? as this is all done remotely and trying to minimize disrup...
I need a solution to suppress the IDF alert in FMC. Thanks
> test aaa-server authentication PINGid host 172.26.38.87 username adminPassword: >Attempting to test without entering the password since it is plain text AND logged, it puts a > after the prompt. Anything typed afterwards just sits, have to enter c...
Hello, Currently having an issue logging event ID 722051 to my syslog server from FMC. This specific event shows connections to our RA VPN and details. By default, we log up to a level 4 but that does not cover this event which is a 6. I added this e...
Hi Team,can we monitor BGP on the FTD through SNMP? I don't any option to configure SNMP traps for the BGP on this firewall. The device is Cisco FTD-2110
On GitHub is available a new firewall analyzer tool: https://github.com/WatchThisFirewall/WTF.v1Watch-This-Firewall is a firewall assessment tool designed to connect to firewalls and perform a comprehensive analysis of their configurations. It checks...
Dear Experts, Can anyone please let me know what's the best monitoring tool for Cisco ASA firewall. I know we can monitor it through ASDM, but are there any other alternatives for ASDM. Also I want to know the recommended monitoring tool for Cisco ro...
firepower-2130 /firmware # download image ftp: Location of the image file scp: Location of the image file sftp: Location of the image file tftp: Location of the image file usbA: Location of the image file firepower-2130 /firmware # download image usb...
We recently upgraded from FMCv7.4.2.1 to 7.6.0.113 and ran into a logging issue (FTD remains at 7.4.2.1). This was after FMCv hung on reboot referencing a Perl script that hung on a database operation. Of course TAC was on the call, we had planned th...
Hey I was messing around with esxi and from FPR1010 I have a connection to an SG350XG.. On the SG I have a Network 192.168.4.0/24. That Network is connected to esxi vswitch. On there I have VM and another vswitch with 10.0.2.0/24 Network. Now, 10.0.2...
