i have two 5525-x "active standby" with sfr managed by fmc , I disconnected them and upgraded each one to 9.14.2. I installed back the one with "failover primary" into the rack and brought it live but now i need to connect the "failover secondary". I...
Forum Posts
We’ve faced an issue from FMC that’s when we try to edit the ACL policy, (Policy >> Access Control>>Access Control Policy Editor), it can’t be loaded and after a minute of loading, it automatically goes to Summary Dashboard Page.I’ve tried changing t...
Resolved! FMC connect AD server
Dear ALL, I'm looking to setup the AnyConnect VPN service, our FMC are using internet IP to connect the FTD FW(no any VPN), i had added the AD server under "integration->Realms", but the connection always failed.I would like to know the AD server is ...
Hello Team,We want to apply secure shell setting to our management interface to access SSH of FTD from management subnetwork only. But we can apply this settings inside or outside or DMZ interface only. Management interface not seen.Primary Managemen...
Resolved! Asa 5525 latest recommended version
Hello I have an ASA 5525 that has 9.8(4)20 and I would like to upgrade itI see from Cisco Downloads that the recommended is 9.12 and 9.14 But as it approached its end I would like to know if it can handle it performance wise. Any hints? Regards, Kons...
Resolved! Firepower NGFW Airflow Direction
Data sheet and hardware installation guides don't show the airflow direction of the 4100 series NGFW's. Any know for sure the airflow directions? Thanks!
Hi All, The company I work for has a few ASA 5525-X firewalls in production, and they seem to be working great. We currently do not have the Firepower modules installed as we filter outbound traffic heavily, only a few IPs can get out. I looked up on...
Hi,I need some clarity on FTD, FXOS and FMC.If I configure TACACS+ for FCM, and Radius for FMC, based on what kind of authentication method that FTD would work.Recently i removed TACACS+ configuration for FCM, so i am not able to login FTD with AAA c...
Hi Guys, I just want to double confirm my understanding for this feature ISE acts as a pxGrid Controller and FMC subscribes to the controller to receive session data. Note: we have a normal install of ISE not ISE PIC... (Not actually used or installe...
Hi AllI am looking at moving from ASA to Firepower for Remote access vpn.Does the Firepower support Dynamic access policies ? i.e access lists applied to different user groups? If they don't, then what are the options? we do not use ISE. Also, what i...
Hey We changed the PUBLIC IP in one site...and now we are trying to establich new IPSEC TUNNEL between both sites (CISCO ASA 7.2 - it was qworking before public IP change) .I was able to establish the tunnel but i cannot ping both ends\remote networ...
Resolved! SSM On-Prem Server Generating CSR Issue
I am attempting to stand up a SSM On-Prem server for the first time. It is currently on a test bench connected to a management laptop and a Firepower 2120 supporting an ASA V9.14. I am interfacing via the HTTPS Gui through Firefox with java installed...
Resolved! ASAv ssh connection interface (CML)
Hello, I am trying to connect to the ASAv with Ansible through ssh and i have configured the following:crypto key generate rsa modulus 2048username cisco password cisco privilege 15 aaa authentication ssh console LOCAL ssh version 2 But when i do the...
Dear All, I have an issue configuring PVLAN Trunk for a server that it's not able to configure private vlan itself.This mean following the theory that a private vlan trunk needs to be configured between the switch that is able to configure the pvlan ...
try to open on 5506 port 80 with following syntax on cli object network WEB_SRV host 192.168.1.9 object service HTTP service tcp destination eq www object-group network Internal_hosts network-object 192.168.1.0 255.255.255.0nat (inside_6,out...
