Hi allI tried to remove interface management from logical device because I'm not use anymore, but it's not possible. If you try to change type for interface from fxos (/ssa/slot/app-instance* # clear-mgmt-bootstrap), it failed : Error: Update failed:...
Forum Posts
Resolved! VPN and NAT
I am fairly new with the Firepower firewalls. I was wondering if this is possible. I want one profile to use split tunneling. So I have nat(inside,outside) after-auto source static inside inside destination inside insideI want one profile to send a...
I have a client that runs a Qualys scan on their public IPs once a month. This scan causes the CPU load on all the cores on the FTD to spike to 100% causing all network traffic through the firewall to stop until the scan is complete. I am assuming ...
Resolved! Help! FTD dropped off management
We have a number of ASA5506 running FTD 6.2.3 managed with FMCOne of the devices is not sending heartbeats to the management even after a rebootI logged in to the device over SSH and found that "show managers" command doesn't show anything:> show man...
Hello,Currently, we are using DMVPN with OSPF but we need to change it into EIGRP. What changes are necessary for it??
a simple question: to migrate an ASA firewall to a Firepower 1120 Threat Defense can I use the automated tool provided by Cisco? I understand that it only works with a Firepower Management Center while our solution is a local managed and we do not in...
Resolved! PAK License for N9K-C93180YC-FX
Hi, Apology for my queries, just want to confirm. We have 2 units of N9K swtich and we were only given 1 PAK number. When we tried to register this PAK number to the 1st unit we got the information below:Can we still use the same PAK number for the 2...
Hello, we have CSM 4.19To day it stopped working and we could not login We had to restart it and after approx 20 minutes we logged in. What could the issue be? Thanks and regards, Konstantinos
Resolved! 5516 Migration to FPR1140
We are starting to configure new firewalls to replace our old 5516x. I'm trying to find the easiest way to accomplish this. My plan was going to migrate ACL/Rules to FMC from the 5516x (Done) and then hook up the new firewalls so FMC can at least tal...
I have just upgraded our FMC and FTD to v6.7.... One of the new features within v6.7 is that standard interfaces can be configured to be the management interface. This is perfect for remote sites where the outside interface can be configured as the m...
Hello all,I have a vpn between my branch and main office. From the branch I can reach the main office and the devices there.I would like the branch site to hit the main sites asa and then use it for the internet breakout. I just want it for a few int...
Resolved! Intrusion Alert - Email vs SNMP
Hi everyone, We have an FMC set up that is managing a number of FTD devices. We currently have alerts set up to send emails when intrusion events occur. Emails are generated using the Impact Flag settings and when specific rules are fired (via the In...
I am getting this message when using the Cisco CLI Analyzer on my ASA5505. Cisco ASA Unicast Reverse Path Forwarding (uRPF) Bypass Vulnerability- CSCuv60724. Should I remove these commands on the outside interface? What about inside?
Community,I have 4 total domains, 1 Global Domain and 3 Leaf domains under the Global. I have external authentication configured in the Global Domain on the FMC via LDAP integration and it is working great. However, I have 2 new users who I only want...
Hello Experts @Marvin Rhoads @Rob @Sheraz.Salim @balaji.bandi @Mohammed al Baqari @Richard Burts Whenever I configure IPsec tunnels, I checked Phase DH group and encryptions (DES/AES/SHA etc) and in Phase 2 select the local and remote subnets...
