Hi, team. I have a situation, it's the following. I have FMC and FTD, they was licensing and the licensing were suspended and I assigned the license again, but the Base license I cant' active. I know that Base license is automatically included when y...
We have an ASAv deployed in Azure, running code 9.14(2)15 . For the record, this ASAv was deployed by a consultant, not me originally. The inside and outside interfaces sit in the same Azure vnet, I believe this has to be the case? We have a publi...
I have an existing ASA 5516X in a remote office doing an "extranet" vpn tunnel to my main office FTD 2130 via FMC. main 192.168.3.0/24 <-> 192.168.20.0/24 remote I have a new FTD 2130 I'm going to use to replace the 5516X It is managed and I can dep...
Hi,I am migrating from ASA to FTD with the help of FirePower Migration Tool.I fetched the startup-config from FTD and manually parsed.The FMC is connected successfully and it detected the FTD but when selecting the FTD, it says"the selected device co...
I have a Firepower 2110 connected to a 3850 switch with an access port. I have FMC on a VM on the switch that my Firepower is connected to. Overnight, I don't turn off the switch its connected to and it will seemingly boot to ROMMON mode. I have n...
When i run command show controller pci. I get the below, How do i fix this. 1.) System is not fully operational - The PCI device with vendor ID: 0x1000 (LSI) device ID: 0x0a05 (Accelerator) could not be found in the system.
Hello community,As per the subject, we are about to order a pair of FPR1140 with ASA software/license. But the question came up what if we want migrate to FTD software later in the future? So I understand there is an zero cost SKU for the conversion ...
Customer produce FMC v.6.4.0.7.There are 2 devices connected -first - HA bundle of 2 FPR2130 (FTD) - License: Base, Threat, AC Plussecond - ASA5515 (FTD image) - License BaseThe FMC reported errorURL Filtering Monitor - URL Filtering Download Failure...
Hi GuysI have an HA pair of ASA5508 firewalls and I am having trouble getting a simple static Nat statement working.I am unable to see any traffic towards the interface VIP hitting my outside interface of the firewall. I have run a capture for arp sp...
Dears,I have 2 firepower 1150 will be configured as HV. i need to connect with f5 load balancer. my quation is where to put F5 before the firewall nd facing internet or after my firewall? i will put my servers in DMZ
As the title says, I have a VPN ikev2 tunnel from a Fortigate to a Cisco ASA, but the snmp/ping anything doesnt work on the inside. Also I saw in Forti logging that the traffic is going over tunnel, but on the ASA I don't see any packets on sh cry ip...
Hello, We have cisco sg300 switches (switched network/ LAN), and we are collecting interface statistics data such as in/out octet, unicast, multicast and broadcast for each switch and each port of the switch.Can we detect sniffing attack on the switc...
Hi Guys, I hope you are doing fine. I have a question regarding Logging configuration in FTD. As you may have observed, in Policy section there are two possibilities where you can edit Loggings:1- Policy > Access Control > Logging2- In each specific ...
I have several servers that use the same wildcard cert so I created a network group object that includes all these servers. In the SSL policy I reference the group object in a "decrypt - known key" rule. This worked pretty well until one of the se...
Hi all, I am interested to monitoring the reputation of some IP that we use to send mails.Is there any API or some way to get the reputation that can be consulted from cisco talos to monitor it?We think in take the parameter (good, neutral or poor) f...
