I have a HA cluster of FTD (Active/Standby). On FMC, the monitoring is complaining failures in screenshot below for the Standby FTD. Everything is healthy on the Active primary FTD and FMC... I do not see any blockings or DNS issues...Any suggestions...
DNS based Security Intelligence blocks attempts to resolve black listed names in DNS requests.Does it also block DNS responses containing referalls to black listed names? For example, I try to resolve A (which is a white name).The response does not c...
Dear community members, a customer have to regenerate a S2S-Tunnel (IKEv1) on his ASA runneing a 9.X release but the IPsec Proposal is still missing (see attached ASDM screen dump).He has still an old ASCII configuration but he cannot find a IPsec Pr...
Hello Team,Getting Alarm for 25 Host compromised by SI system of FTD/FMC. Source of the hit is showing CNC.. which is already blocked by the policy.. Not sure then why compromised host is showing. This devices are not there in prefilter policy.. The...
I upgraded my ASAv to 9.15 and the rest api package to 7.15. However, authentication always fails even when accessing the /doc/ url on the asa. Any thoughts? If I roll back to 9.14/7.14 it works.
Hi. I am struggling with cisco packet tracer, i am a beginner in this field. I just build 3 vlans for my internal network that i want to connect to my firewall. I cant seem to connect it to the firewall. I just cant figure out how i should let the fi...
1. I have one 4431 ISR Router, One ASA 5516, one Ca- Switch.Which must be done:*Need to Access my 3 host server via SSH from internet with my Public IP.*Need to Access my web server from internet with my Public IP via 80 and 443.I done Static nat on ...
Hello, can someone please help me with a configuration guide with requirements for integration of AD with FTD (FMC) using ISE as Identity source for captive portal authentication. Regards,Juan Carlos Arias
Hi all,We’ve deployed FTD HA managed by FMC. Last week the primary unit had failed and we are running with only secondary FTD.And we are now planning to replace the primary unit with new FTD. Are there any ways to replace the unit without breaking th...
Hi All I want to ask a thing related this ? we have FTD/FMC and along with treat/malware license and we want to block files according to SHA-256 , SHA1 and MD5 signatures. There is no problem with SHA-256 because we can add custom file list as SHA-...
I am planning to upgrade my FPR-4115 FTD software to version 6.6.1-91. I was given this file:Cisco_FTD_SSP_FP2K_Upgrade-6.6.1-91.sh.REL.tar Will that file properly upgrade my FPR-4115?The "...FP2K..." in the filename makes it look like it's for the F...
I set Dynamic Auto NAT. The ping was passed correctly in all areas until setup. I sent 'ping 200.1.1.2' from RTA after setting up Dynamic Auto NAT, but the ping is not delivered. I checked the ASA and I realized the request comes in properly, but it ...
After a brief network flap on my secondary ASA 5525 the secondary unit is perpetually testing then passing. It's weird that link status would change for those three interfaces at the same time because those are threeseparate devices they're connected...
I just configured our new Firepower 1140 to use as a vpn server. Everything works fine, but I get many of these syslog messages:Mar 25 10:29:00 vpn.example.com :Mar 25 10:29:00 CET: %ASA-sys-4-199016: kernel: [79748.916832] FELL OFF INPUT-rules: IN=l...
Hi gents,Just came back from a customer intervention over their Firepower, having an issue with the timestamps on syslog messages.We've essentially forwarded both policy logs and platform events over to an external linux collector for a splunk to pic...
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 3 | |
| 1 |
