Hi 2AllWe are moving from Juniper Firewall to Cisco ASA.Are there any config migration tool from juniper to Cisco.Are there any cisco ASA simulator to get some hands on.Is it recommended to have 8.3 or 8.2 software version on ASAAny recommended books...
Hello,FTD's 2110 running 7.4.2.1 in HA. and ultimately trying to setup a site-to-site vpn between this FTD pair and anther FTD pair at our other datacenter. However, right now I'm just trying to route plain old internet traffic out of my second outsi...
Hello everyone, I'm having a situation at a client which previously (1 month ago) had a FMCv 6.2 version whis was working fine untill one night. For some reasons the database of the vm has crashed and we had to rebuild the vm (no problem here - life'...
I am trying to use the fiber connections on the SNS 3700 but I am unable to ping the appliance. The ip address is configured on the appliance on port 0 but the appliance is shown to be connected to the switch on port 2. Is this correct or is there so...
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvy19415 -> Is this a default behaviour of FTD Devices in HA Pair ?Active Secondary FTD device is sending syslog messages using the hostname of the Standby Primary device
Hi to all,i am running a pair of FTDs in HA. They run 7.2.8.Suddenly the backup pair started announcing that the SSE Service is down (please see attached png for FTD-2).The primary FTD (FTD-1) works OK and the SSE Service is user disabled as i have d...
Hi all, Now we are using RA VPN in Different firewall ,Will enable RA VPN In FTD manage by FMC Flow -External user -Permitter firewall FTD -RA VPN firewall FTD - AAA-Cisco ISE -Mostly Authentication -Certificate + OTP Now our main concern is how ...
Hi, I am moving from 5506x working in asa mode to firepower 1010 in ngfw mode. It is being used in a remote location mostly to protect web servers in a datacenter and I want to monitor the temperature of the unit (Munin is charting the data). For 550...
Good morning everyone,I recently installed a CSF 1210CE FTD on which I configured two external interfaces to use two ISPs with two different public IP addresses.I then configured two default static routes with metric 1 for the main one and metric 5 f...
HiI need really urgent help. I upgraded our Cisco FTDs to new recommended version but one of them get failed and now it can't boot to system. Even I don't have access to COM and enter to ROMMON mode for recovery. It looks like entire OS failed and bo...
I'm trying to configure macec encryption between a cisco Catalyst 9300 switch and a server that is running Linux (red hat).I tried to combine guides from red hat and cisco to do this but so far no success.For the cisco side I used this guide. For the...
Hello Team,I have topology as attached, I have introduced another interface on the ftd [172.16.40.25] . this is where have configured the new tunnel to the branch site. on the asa have natted 41.206.58.2> 172.16.40.25 on 4500/500 services. i then us...
Hello,I have a Cisco Firepower 1150 running firmware version 7.6 with three connections to different ISPs.I want to set up Remote Access VPN (AnyConnect), but I encountered a limitation: Firepower only allows configuring VPN on a single external inte...
Currently have a Virtual FMC with ASAs converted to ftd, these will be decommissioned and replaced with 1210c on our on prem FMC. The asa/ftds can not be upgraded anymore, hence on a separate fmc virtual until we get rid off them.How could we replace...
Dear Community, We explore the solution to mitigate VPN brute force attack in Cisco FTD. AD users always locked out when under targeting potential VPN brute force attacks so it leads to AD account locked out and impact to legit users (internal user...
