I have two Cisco Firepower 2110 in HA Configuration. I tried to perform version upgrade from 6.4. to 6.6. I got Device2 (Standbyd device) upgraded to 6.6. But the Device1 (Primary) failed the update. And the Device1 i showing up in maintenance mode a...
Forum Posts
Hi there, I got a Cisco vFMC with two Cisco Firepower configured as HA pair. At present the Secondary unit is Active. We got an issue with the Primary unit and have to perform factory-reset. I got a couple of questions: 1) Do I have to break the HA ...
Which version of IOS patches this advisory?Cisco IOS XE Software for Catalyst 9000 Family Wireless Controllers CAPWAP Remote Code Execution Vulnerability I can't find any IOS XE version released around the date of the advisory. The newest version I ...
We have two ASA 5525Xs who's management interface is on our OOB management network (172.16.8.0/22). Until now, the ASAs were sending SNMP (for port traffic) and NetFlow traffic to a server (172.16.4.45) on one the ASAs standard interfaces (172.16.4.0...
HelloI created a site to site tunnel. The vpn is up but the truffic does not pass. Attached the logs found.Cordially
Resolved! Network Link Encryption
Hi all, hope to find everyone well in this timesI had a request from a costumer where he said that I need to have all the network links encrypted but I have no clue how to implement this.Basically the core of the network is comprised by Cisco 9300L i...
Resolved! Two default routes in FTD-2130
Hello guys, I'm using FTD-2130 version 6.3.0 managed by FMC version 6.5.0, how can we use two default routes to the Internet ...
Hi All, I am working with a very peculiar design requirements, where we are using FMC4500 and FTD 4140 with container instances. We have assigned a Eth1/8 interface as logical management interface to be shared by all containers. Now the requirement i...
Resolved! SAML Redundancy for Cisco ASA
Hi Everyone, I have customer who has an ASA in Active/Standby mode and have SAML Single-Sign-On configured. The SAML SSO works fine but during failover, it gave and error "Authentication failed due to problem retrieving the single sign-on cookie. ...
Hello, Zone Based Firewall is dropping packets from one interface to another and I cannot understand why.1) There is a zone-pair between both interfaces2) All IP traffic is allowed3) In the log says (target:class) - (none:none). Not event class-defau...
Hello, I am facing a problem to have RDP port forward to a PC inside the firewall on ASA-5506-X. ASA version 9.8.Ethernet port 1 configured as ouside, ethernet port 2 configure as inside_1, ethernet port 3 as inside_2. other enthernet ports are disab...
Resolved! Monitoring FPR 1120 by FDM
Hi team! I currently have an FPR 1120 which I manage from my FDM. The version of Threat Defense used is 6.4.0 102. I require network management much like ASDM does with ASAs. With URL filtering, network throughput management, etc. Is this possible w...
Resolved! ASA 5585-X 10GE license
hello I have two ASA 5585-X in an Active/Standby failover.I tried to install the 10GE license on both units. I am getting the below error. SHZF-DBFW-5585X-01# activation-key d81ace61 1838c7b5 7870a944 85949800 c73b0680Validating activation key. ...
Resolved! Firepower (FTD) HA designs
We are looking to get 2 new FTD's and want to deploy them in a HA pair, I've been going thru docs and designs and noticed all of them show a RTR as the edge device and both FTD's coming off of that. (with private ip addresses on the outside interface...
Resolved! allow webvpn access from 1 IP address
Good Day,I would like to lock my ASA-5506 down to allow WebVPN access only from the remote office. I am thinking I need to apply an access-list to the external interface?webvpnenable outside permit 8.8.8.8 255.255.255.252 <-- used google dns as an ...
