Dears,I'd like to confirm about FMCv firmware upgrade time. I directly upgraded from FMC existing version 6.4.0.9 to targeted one 6.6.4. After taking 7 hrs continuously included existing time from maintenance mode, this upgrade finished successfully....
Forum Posts
HelloI am facing an issue with SSH/HTTPS management access on a Firepower 4100. After un-boxing the device, I consoled in and ran through the initial setup. I assigned the IP, subnet, hostname, default gateway, and IP blocks on the interface. I am...
I know how to configure MFA when authenticating again accounts in Azure as this is already done with one of our other firewalls, but I've been tasked to configure AnyConnect on a FPR-1010 using local authentication, either with user credentials or wi...
I can't seem to get past the error 412 “The remote peer is no longer responding”. This message is from the Cisco VPN client log. I can see the VPN ACL on the outside hit count increase so I know that the client is reaching the ASA. But it not talking...
Hi Cisco team, my anyconnect can not connect to my office VPN. The message is : "AnyConnect cannot confirm it is connected to your secure gateway. The local network may not be trustworthy. Please try another network." Here I show my xml. <?xml vers...
Hi All, Does we need Security Plus license to enable Dual ISP failover for my ASA in Active-Passive Ha deployment. Please help
Hello all- recently upgrade a FirePower 1010 running ASA 9.14(2)15 to 9.14(3)9 and had some problems. Following successful image update and reboot any switchports that were assigned to VLANS did not come back up. Normal (non-VLAN) assigned switchport...
Resolved! can't enable multiple contexts mode.
I'm really confused here. I can't enable multiple contexts on the ASA. What am I doing wrong here? ciscoasa# config tciscoasa(config)# mode multiple^ERROR: % Invalid input detected at '^' marker.ciscoasa(config)# mo?configure mode commands/options:m...
Hi Everybody, after renaming a managed FTD on both sides (FMC and FTD) the Connection Events still show up the old name of the FTD.Any Idea how to change this? I bet this is somewhere deep down the FMC Database. Kind regardsMatthias
My integrator set up our firepower HA pair and set up the pxGrid ISE integration. When I started testing SGT filtering in our access policies, I kept losing connectivity that contained any SGTs.Doing some reading I think I sourced this to MNT update ...
I am trying to figure this out. I created a new block rule on Monday.When I check the hit count today I see that there have been 275 hits on that rule to date.When I check the connection events I don't see those hits. I have made sure that loggin...
Is it possible to show resolved hostnames in the FMC reports? It was an option I enabled on the old Firepower system for ASA but I can't find it anywhere on the new FMC for FTD. I've looked everywhere. It's not a big problem at all but I do weekly re...
Resolved! QoS and Layer 2 DoS attacks
Good Day!! i have a question?Can i use QoS along whith DHCP Snooping and DAI to contain a DoS attack on Servers? Thanks
Hello, Is it be possible to collect Firepower IPS connection events via syslog rather than estreamer (FMC)? If yes, is there any info that may be missed (e.g. security intelligence events, any potential interesting fields within the connection event?...
