Hi team,The FMC is generating the alert like below.SECONDARY (xxxxxxxx) FAILOVER_STATE_STANDBY_FAILED (Check peer event for reason)Both FTD 9300 are in HA over a port-channel. I have checked both port-channel physical interfaces are in matching the ...
Hello Communityi am tryig to do PBR flex config in my lab environment . 1. I have 2 internal subnets 10.1.1.0 /24 and 192.168.1.0/24 2. i want 10.1 should take isp-1 and 192.168 should take ISP-23. did extended ACL and tried Flex config , but getting...
Hello everybody, a cusctomer has a Firepower 4110 running 6.6.0 and configured by FMC.I have a pricipal question:Is it possible (and if yes, how) to let pass a certain UDP broadcast from one IP network to another when the FTDhas own interfaces in bot...
Hi there,We've got pair of ASA HA 5525 firewalls (v 9.12) configured with 3 interfaces (Outside,Inside, and DMZ). We would like to configure NAT rules for a window virtual web server (IIS) that will host 3 websites (each website will have public IP a...
Community,In the FMC, is there a way to move an Access Control Policy that was created under a subdomain into the "Global" domain? Or do I have to completely recreate the policy in the Global Domain view? When I try to copy the policy it just places ...
I've read through Cisco ASA documentation and saw that IPv6 multicast routing is currently not supported. Was wondering if this is a work-in-progress or is this a feature that will never be offered for ASA 5500-X series firewalls?Also, since IPv6 mul...
Firepower 2120 ASA Software Smart Software Licensing: Cisco AnyConnect Plus License 1500 "In Use" = 0VersusCisco FPR/ASA VPN Session Summary - AnyConnect Client: 500 Is there still no implementation to count the session at Cisco Smart Licensing?Exper...
Let's say that I have a few Sourcefire 3D Sensors (8130) and a Sourcefire Management Center that are on an OS that is before 5.4, one of them being on a version that's a bit older. What are the suggested upgrade paths for these devices? I know that I...
Hi, I have a critical notification on my Sourcefire - Health Monitor. It says "Module Disk Usage: High unmanaged disk usage on /Volume" even though the Sourcefire has a lot of free memory.Please tell me what can I do with the "/Volume" directory to f...
Hi all,While running a packet capture on an access switch for a device (10.1.1.1) I blocked it's internet access on the FTD (4125) as it was trying to reach 50.1.1.1.I did this by blocking all traffic for 10.1.1.1 through the FTD with a "Block with R...
Hi all, I recently upgraded one of our ASAv's to code 9.12.4-10 as an interim code, just to keep a customers appliance up to date. Upon reboot, the device was alerting as unlicensed and therefore ran at a rate limit of 100kps and with (i think) up to...
How long does it take to check the data base tables? Yesterday I installed the FMC KVM, still the system checks the database.("Database tables are still being checked, Proccess Manager will not start"), Respectively, of WEB GUI is not available. Is t...
I am currently having to configure a new C921-4P. I have read over the documentation and crawled the internet but cannot find anything that can help with a few requirements I need to fulfill. These requirements are from the L3 switch stig. 1. Disab...
Dear Community, On the ASA there are a few options that dictate what traffic can flow between interfaces. These options are: -Enable traffic between interfaces that are configured with the same security level-Enable traffic between two or more hosts ...
Hi everyone,I have Cisco ASAs 5540 running asa917-29-k8.binCan they be upgraded to 9.4? Cheers!
