Hello, I have doubts about the number of subscriptions required in the following scenarios:Scenario 101 x Cluster of 2 Cisco Firepower 4100.How many IPS subscriptions are considered? One or Two subscriptions L-FPR4115T-T-3Y?Scenario 201 x Active Stan...
Forum Posts
Resolved! Firepower MCv Device License
Hi Guys,I can't find this Firepower MCv Device License license anywhere on CCW? Does anyone know the SKU?Cheers
Resolved! Cisco Firepower 9300 Multi-Instance HA
Hello Guys,I have a question about HA (Failover Active/Standby) for Multi-instance deployment. In ASA platform with multicontext I setting failover on system context and I using only one link between devices (state link cover on failover link) with o...
Good afternoon, I am just trying to figure out what the steps are for enabling LDAP to LDAPs authentication and specifically what needs to be done on the server. I saw that a certificate needs to be installed and the steps weren't too intuitive. ...
Hi, would like to ask if s2s failover is supported in ASA multi-context mode? ASA current version is 9.6(4)5
Hi all, I'm having some serious technical issues with establishing a site-to-site VPN to Symantec's Web Security Service (WSS). Getting technical support to help is also really really painful. After three months of pulling my hair out I finally had ...
Hello all,there is not too much information about Protected Access Credential (PAC) file deployment and background for Cisco ASA firewalls except this and another official documentation.there are stated following restrictions about importing PAC cred...
We currently have a working tunnel from one of our ASA's to AWS. As we can only have single subnets set in the tunnel due to AWS limitations, our NAT statements have quite wide ranging subnets to catch all the possible combinations.We have one serer ...
Hello,I need to modify the Carrier Delay parameter on my Firepower 2130 (FTD).Any documentation or advice with which you can guide me?
While doing an SSL qualys scan on an ASA, no support for secure renegotiation and forward secrecy getting flagged. I am striking out on finding info on this. Anyone know how to fix this? I currently have tlsv1.2 only enabled with only stronger ciphe...
Hello,I have a question regarding HA setup within a LAN, in a scenario where there are 2 main buildings. I'm curious as to how this would be best achieved through either configuration or from a design standpoint. I have attached an image showing the ...
Hi All I would like to know if the firepower 4100 setup in Active-Passive, so if the uplink switch in VSS, combine 2x 40G uplink to the Firepower pair. QuesionFirepower Active-Passive setup, what would the real time interface bandwidth would be , is ...
I am trying to forward port 443 to a local on prem proxy so I can host webservers. I also need remote access vpn enabled which as far as I can tell automatically enables the 443 service on the outside interface. This is happening even when I disable ...
Folks, I am trying to initiate a ping from my FMC Cli but I do not see Ping command available in CLISH mode.. All I see >ConfigureExitShowSystem When type system. Sytem> It will give other options but No Ping, configureexitexpertgenerate-troubles...
Hi everybody! I'm trying to wrap my head around a network design shown in the attachment. Essentially, it will be hub and spoke utilizing the FP2100 platform funning FTD. I haven't used FTD before and I'm having trouble getting the 'Gray Site to Site...
