Hello everyone, I need help upgrading Cisco FMC VM. Current FMC version is 6.2.2.5, from cisco upgrade path doc I found that its possible to upgrade directly to version 6.4.0. Since we have two CISCO ASA 5515x devices in Active/Standby setup, should ...
Forum Posts
Resolved! FTD Source Interface for LDAP queries
Hi all, Is it possible to change the interface at which a FTD sources LDAP queries? I am trying to use a LDAP server which is only reachable over a S2S VPN to the main office from the remote branches, and it does not seem to work. Some remote br...
Resolved! IP SLA/PBR behavior for Firepower
We have an FTD with two ISPs where Guest traffic PBR policy uses the backup circuit. I am wondering though, is it possible to use IP SLA in conjunction with PBR so that if this circuit has issues, it falls back to the other circuit? Or is the PBR alw...
guys this might be a running thread already.I am using an FDM for sometime. Recently purchased FMC. Can I add FDM/FTD (firepower device) to FMC without loosing any FDM config.Is there an option to import Firepower config to FMC.
We've deployed FTD HA managed by FMC in our DC and it was running normal until the secondary FTD state become disabled itself a few days ago.We've no idea why the secondary FTD went disabled by itself but we planned to work with TAC while applying fo...
We have a remote location running a PA-850 that has a site-to-site VPN tunnel built to a FTD 2140. The tunnel initially builds OK, and can run months without any problem. The issue is when the remote location loses power and the PA-850 hard boots. Th...
Hi, I am trying to workout a way to find the the last hit time for all the ACL rules on an FTD from the CLI. In ASAs you can use the show access-list all_name brief command and match the hashes from that with the hashes of the ACEs in an ACL to get t...
I wanna to do two firewalls in cluster (Active/Standby), like HSRP. I haven't found this configuration in ASDM, follow the picture attached.
Resolved! ASA-5506 NAT issues
We have multiple ASA-5506s that are being used for compliance reasons. The first two went in just fine with no NAT statements, but the 3rd one drops around 25-30% packets both to and through the firewall. All firewalls are running 9.8(4) and were con...
Firepower 2110 only has interface type static and dhcp.I cannot see pppoe option in WAN interface.I use FDM for management.
Hello.I'm working with Cisco FMC 6.6.0, and I'm trying to execute the following API call using the API explorer:/api/fmc_config/v1/domain/{domainUUID}/devices/devicerecords/{containerUUID}/operational/commandsFMC API reference for this call:https://w...
Hi all, I would like to get an output on when an ACL was hit for the last time. From within ASDM you can get the date when you hover over the hit count. A bit cumbersome to this manually for all ACLs :(. However I've not yet found a CLI command that ...
hello all.been trying to configure this setup for the last 3 weeks.at the moment i have a session on the ise, however anyconnect shows the encryption as none...also, i do not have network what am i missing here?the authentication and authorization po...
Hi All, Kindly need your support , previously i take RMA from cisco for new cisco ASA 5516 to change my broken asa.and after i setup failover new cisco asa. there is notification from new cisco asa like this : no replication at all for both cisco as...
Is it overkill to have threat detection scanning on an ASA 5516 with Firepower services? Can I get the same and better protection from Firepower only?The reason for my question is that I get several tickets a day to un-shun VPN users. It's not always...
