Worked fine in version 6.1.0.4-17, but then,After upgrading sensors and threat defense center to 6.1.0.5-45,Custom and built in reports fail with "Failed to generate".Regardless of output type, html, pdf, csv.I even created new templates, same issue....
Hi all,I'm trying to do the following : service-template IOT_DEVICES_TEMPLATE sgt 3 vlan 100!class-map type control subscriber match-all AAA_SVR_DOWN_UNAUTHD_IOT_DEVICES match result-type aaa-timeout match authorization-status unauthorized ...
HelloWe have an ASA5510 v9.1.(7)32 at branch with configured IKEv2 site-to-site VPN to Head office.All traffic goes through VPN.ISP give an ip-address by DHCP with 4 gateways (yes, multiple), that randomly changes. Some of them reachable via ICMP, so...
All,I am starting to convert all my 5516x ASA with FirePower Services over to the full FTD image. I have 22 total to convert and have successfully converted 4 of them over. Now that those 4 are on full FTD image I need to use Smart Licensing instea...
Hello all,Very new here and to Cisco, so I apologize if this is not the correct spot to post.So I am a ACSS Certified Avaya Engineer and I am looking to get more into Networking.I have an older 5520 ASA that I was able to Factory Default and load the...
HiI can see on our FMC/FTD that our tunnels use the default IKEv2 policy which includes DF 5,2 if I want to establish a new Tunnel but want to use DF 14 will this require creating another IKEv2 policy and selecting DF 14 or can I just simply select ...
Hi, I know there have been some posts similar to this, but I couldn't find the one that exactly fits my scenario. I recently upgraded my ASA to unified FTD image. I am locally managing FTD with FDM and configured basic ACLs, static routes and basic ...
Dears, I have setup a file policy as per the attached, i can see the logs that the malware has been passed by the file transfer though i have block malware for all the type of the file, can anybody confirm to me by the file/malware events as per the ...
We have an internal VLAN that we wish to have ACLs to allow https traffic for when applications need the access to perform upgrades. If we try to setup NAT it wont let us use port 443 because it is in use with VPN and SSL. The ACLs dont seem to have ...
Hello All i'm hoping you can assist me, i'm trying to convert from the old ip inspect firewall rules to zone based policy'sI have worked out most of the setting however I can't seem to get outside icmp blocking to occurI want clients inside the netwo...
I am doing some testing in a lab environment with the SSL Decryption. Because its lab and I don't have an internal CA that the machines trust I ended up using a public signed certificate so all the clients would trust it. The FTD appears to be doin...
Community,I am working with TAC on an issue with my FMC's. In the meantime while the issue is being resolved by TAC my FMC HA pair is in a split-brain situation due to the sync being paused. TAC is stating that I can still make and push changes from ...
First VPN config. Missing something simple. ERROR: Address X.X.X.X overlaps with outside interface address.ERROR: NAT Policy is not downloaded.Firepower 2100 series using FDM for configuration. I have configured the VPN for inside network object X.X....
Hi,I would like to ask about PLR for firepower. My firepower don't have internet so i run with evaluation license.Now I want to change to PLR.I knew how to switch to PLR from registered the device using smart licensing.But i cannot find how to switch...
Hello All. I have an FTD running 6.6.4. - the current interface config:1. Inside Zone - Interface 10.10.10.1 (network 10.10.0.0)2. Outside Zone - Interface 10.20.20.248 (network 10.20.20.0)3. Route - any-ipv4, outside, global, 10.20.20.1, false, 1 Ne...
