We've been having this strange issue wherein the firewall would disconnect or stop communicating to TACACS server. We recently migrated to Cisco ISE from Cisco ACS and for some strange reason there will be times (a lot of times) that the ASA will sto...
Forum Posts
This notice is logged after the router start up: "Linux version 2.6.22 (zls[at]cybertan-team2) (gcc version 4.2.3) #47 Wed May 27 10:33:03 CST 2020"This Linux kernel is subject to 'Dirty Cow' exploit.
Hello All, Is it possible to do port channel of Subinterfaces in FTD. Please find attached figure where i will bundle port ethernet1/3 (contains subinerfaces 1/3.1, 1/3.2) with ethernet port 1/5 (will replicate same configuration as of port ethernet...
Do ANY of the physical FMC hardware appliances (1000 / 1600, etc.) support memory upgrades ?I believe the answer is "No", but wanted to double check with others.. TIA..
Hi, we are using the cut through proxy feature on an ASA against a radius server for some years. As this is basically a WebSite we are looking for the option todo authentication against SAML or OIDC . I have only found documentation about using SAML ...
After upgrading FXOS of Cisco FTD 4120 from 2.4 to 2.8(1.162), we are getting the "The password encryption key has not been set." as fault with severity Major and code F1772. my FTD is in version 6.2.3.16. Pls advise.
Hi,I currently have 2 Cisco FTD 2110 devices in a HA pair. Both FTD and FMC are running 6.4.0.3 code.My primary ISP assigned a /27 public block (100.100.100.0/27 for example) being leased to me, I do not own them.So I was able to implement some one-t...
Hi all, I'm not fully familiar with ASA's but I'm really stumped and need help. I have a HA pair of 5510's with a current ISP connection in them. We now have a new ISP connection which I have connected to Eth0/3. The link has been provisioned as a...
I am in the process of converting to an MPLS baased network using BGP routing. My network management station is reporting traps with OID ..1.3.6.1.2.1.15.7.0.2. I have tried using the SNMP object locator on the Cisco site for this but it cannot find...
Resolved! ISE 3.0 TLS v1.2 enable.
Hi, To enable TLS 1.2, I only need to uncheck 'Allow TLS 1.0' and 'Allow TLS 1.1' on Administration > System > Settings > Security Settings? How do I check if TLS 1.2 is active after disabling 1.0 and 1.1 ? Thanks
my FTD 4100 show Running version 6.2.3.16.59 and start-up version is showing 6.2.0.363. Any clue or issue , as we are planning for FXO upgrade..
Resolved! Licensing FMC 4100
Hello everyone,I have the following licensing questions for the 4100 platform plus FMC.Activation of multiple instances. Does it require a license?To form a Cluster between 2 Cisco FTD 4100. Is any special license required?I appreciate your time in a...
My SSL decryption policy is working but the FTDs are experiencing issues trying to decrypt sites that appear to be protected by cloudflare. For example, if I go to yahoo.com, I can see the certificate in my browser was intercepted by the FTD and the ...
Hi Community! I'have some issues with monitoring cisco firepower 2100 with snmp in Zabbix. I configure well all snmp in FMC, and i use snmpwalk v2c to poll all interfaces in my zabbix. But the problems, i get others interfaces like : Can you hel...
I was told to configure firepower for our cisco asa 5525-x and thought i'd have to install a module, but this guy is telling me it's embedded into the firewall.. I haven't found anything on how to configure this though and am confused on how you woul...
