We are running a couple of virtual FTDs in Azure and noticed when we have a port group with several tcp/udp ports listed and added ICMP-Any, pings were not being allowed through. But once we removed the ICMP-Any from the port group and added as a sep...
i am trying to register my FTD to my remote FMC by this guide with manual methodhttps://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp2100/firepower-2100-gsg/ftd-fmc-remote.html#task_imq_yw3_b3bbut when i am adding my FTD to FMC i go...
Hello, I have a couple of ASAs 5515 on HA cluster, I configured on the active unit failover key xxxxxxxxxxxxxkey config-key password-encryption xxxxxxxxxxxxxxx However the config syn failed and I lost the HA cluster, the configured one worked for a c...
I have a very strange issue. I have several firewall pairs, each running active/standby. I am in the process of upgrading firmware to 9.7(1)21. Once both firewalls have been rebooted they both in the active state because they loose failover connectio...
We have a Windows 2000 Adv Server on a DMZ interface of a PIX firewall. We are using native Windows SMTP services as a Front End server for Exchange mail. Our Exchange server has a SmartHost entry that sends outbound mail to the server on the DMZ. Ou...
Hello We purchased new FMCv license to manage 10 devices and we already have FMCv license to manage 2 devices, both are attached to the same virtual account. i need to use the same FMCv i'm already using to manage 10 devices instead of 2. so, i need ...
Hello Everyone, I'm trying to allow access to a DVR so that I can access it from the outside using port 37777. The app on the phone is using the outside IP and port 37777, but the the firewall is showing: %ASA-7-710005: {TCP|UDP} request discarded f...
Currently have a FMCv with a 2 device licence of which both licences are consumed. Customer now wants to add in a third Firepower managed device which will obviously take it over the device limit. I know that I am unable to "stack" up 2x 2 device lic...
All,I've been tasked with obtaining an alert whenever a security intelligence feed or list is added/removed/modified within Security Intelligence but only have been able to find a means to alert on events discovered from SI.Might anyone know of a way...
Hello Could smb help me to resolve my problem, I have a number of Firepower 2130 pairs working as Active/Active with the next versions of software: Cisco Adaptive Security Appliance Software Version 9.18(3)56 <system> SSP Operating System Version 2.1...
I have on my network two different models of Cisco ASA which seem to operate differently from each other. Can anyone confirm that this is the case?Device type A is a Cisco Firepower 4120 running ASA version 9.18.(4)34 in Multi-Context mode.When conf...
I added a new user to FMC, but when running the test, it's saying the user doesn't exist:user :adminattrib :sAMAccountNameldap_result: 32 -No such objectThe user does exist in my domain, so not sure what else to try.
Hi - I'm running ASA 9.20(3)7 on a FPR2110-ASA-K9I'm creating some QoS policies, some of which need priority set.However, when I try to add "priority-queue INET" I get an error message: "ERROR: priority-queue not supported in unknown interface"I don'...
I am moving the SVI from switch to FTD for vlan1 and using it sub interface, but i dont see arp entry for vlan1. I noticed this at least for 3 different sites and 6 firewalls. it works for other VLANs except VLAN1.Any idea why is this the issue ?
Hi to all,after upgrading from 7.6 to 7.7 RTP traffic as well as FTP stopped working. I disabled media inspection with flexconfig and media started working again.Now our users complain about problems with ftp.I suppose that if i disable ftp inspectio...
