I have an FTD which is able to ping 8.8.8.8 and internet but not able to ping system tools.cisco.com. Threat Defence Cloud error is showing. This FTD is using the same DNS policy as another which is able to ping tools.cisco.com
Forum Posts
Resolved! Packet tracer fails ASA 1150 Firepower
HejI have a ASA 1150 firepower. I am trying to NAT that comes from Internet with dest tcp port 666 to be natted to 10.250.1.54 tcp port 666 Here is my configobject network OSCAR-ANYCONNECT-IP host 10.250.1.54 object service OSCAR-ANYCONNECT-PORTS s...
Resolved! FTD Migraton Uisng FMC
HiI dont have access to a lab so am asking a couple of questions'I want to migrate from one FTD to an HA pair, On the FMC thats is currently managing the single FTD there is a sub doamin for the FTD but on the new FMC where I want to migrate the FTD...
Hi, this might be a quick and easy answer for someone. Is it possible to upgrade individual firewall contexts within a 2130 virtual firewall and have them on different firmware? (running ASA). Or will they all get upgraded at once?Thanks.
Troubleshooting an access error with System Support Firewall-engine-debug and the traffic is hitting an allow rule but says "Pending Rule Order XXX" but never allows the traffic. Can someone explain what this is and how to fix it?
Is there a way to remove interface configuration quickly? I have some decommed ints which are being used by objects and policies. Or is there a way to identify quickly which objects/policies these are and remove them
Im coming from a sophos background and this is my first time using FTD. We have a /29 public ip range that in the Sophos firewall I would just create alias interfaces for each public ip and assign to the physical WAN interface. (then do nat / fw rul...
Cisco switch Catalyst 3850 48 Port PoE - Vulnerabilitycan any one help me to fix the issuetest#sh ip sshSSH Enabled - version 2.0Authentication methods:publickey,keyboard-interactive,passwordAuthentication Publickey Algorithms:x509v3-ssh-rsa,ssh-rsa,...
Resolved! Unable to register FTD to FMC
I'm having trouble adding FTD to FMC. Originally I was managing FTD locally with FDM, but lack of features got me moving to FMC. I ssh'd to FTD, and issues the command configure manager add <FMC IP> <Reg Key> and now it says 'pending' I went on to ...
Hello, I installed pam_radius on a red hat/linux server and configured it with ISE radius authentication. Was able to ssh to it with configured user on the radius server. But one issue is that the user name must be on both of the linux host and ISE a...
We have two FTDs managed by an FMCv. both running 7.2.8. We are still using Snort 2 and will most likely go to Snort 3 after we are done upgrading to 7.4.2.We are thinking about a secondary network appliance that would possibly use snort as part of i...
FMC: v7.3.0 (build 69)FTD 1120: v7.2.5ISE-PIC: 3.2.0.542, Patch 4We have a new integration between ISE-PIC and FMC that we are trying to use in policy. I can see some users are shown in the Unified Events, but many entries show as "Not Found". For on...
Hi,I use ASDM and export Identity cert + PKey from Firepower 2310 ( ASA mode ) and when I import it to ASA 5512 it gives error:FP ASA version : 9.18(4)22ASA 5512 version: 9.12(4)37
Hello everyone! In our organization we have two Cisco FTD 2110s managed by FMC and configured in a HA pair. Until recently, they functioned as regular stateful L3-L4 firewalls. However, a couple of months ago, the authorities demanded that high-level...
Hello, I cant get into the FMC anymore. I can get into the Cisco Firepower 2130 Threat Defense and elevate to expert mode if needed. Does anyone know how to change the password for the FMC through the OS only?
