Greetings - We have a Firepower device managed via FMC and need add a large number of ACLs to the control plane. Adding the ACLs using the GUI is time consuming and cumbersome to maintain. This is a process we would historically script with the ASA...
Forum Posts
Resolved! ACME on ASA
I am attempting to use ACME to register a letsencrypt certificate per:https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-asa/222809-configure-certificate-enrollment-with-ac.html#toc-hId-1431558463I've tried it on several Firepower 10...
I am trying to use Secure Syslog over 6514. In the past we used the diagnostic Interface as Source(on other Firewalls), and it is working.I am seeing inconsistencies in the TLS Communication of me new FW. So i remembered that the Trust-point has to b...
Hi All,I have deployed 2x FTD 2140 in a HA mode. These are managed by FMC (version 7.2.3).What i am try to achieve is configure one of the data interfaces on each FTD to use as inband management interface. I will like to use this data interface for F...
Resolved! keep security zone on FMC
Hi CISCO DEV teamCan we please keep security zone under objects on FMC? before I upgraded to 7.4.2, There was security zone under objects on FMC, later, you give it a new name "interface" instead of security zone. you make things complicated. it was ...
Running into an issue with AnyConnect and OKTA SAML with 90 second delay between authenticating and actually establishing the connection. Initial login/redirect/MFA is quick then the client shows "establishing connection.." and 90 seconds later (giv...
Resolved! New ddns methods in ASA 9.15.1
Hi all - has anybody tried to use the new web update-url for ddns introduced in 9.15.1?How I can make it work with dnsomatic.com?My config is:ddns update method dnsomatic_web web update-url https://username:password@updates.dnsomatic.com/nic/update?...
Hi there,We have two FMC in HA and we need to register a new FTD in a remote branch. We will configure NAT for port 8305 for the remote FTD to reach the primary FMC. According to this knowledge article here, it mentions that a second tunnel towards t...
What is the proper procedure to restore Cisco Secure Firewall Threat Defense configuration that was in HA? I tried using the GUI to Backup and Restore but it doesn't seem to work. Am I suppose to login to both units using GUI and backup each configur...
Port Vulnerability Name Cve id 22 SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795) CVE-2023-48795 22 SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795) CVE-2023-48795 22 SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795) CVE-2023-...
Dear Team,The issue occurred on ASA 9.18(4).22, which is managed by CSM 4.25 SP1.Thanks,Anuradha
Hi all,What's the general consensus about FMC's IPS recommendations? I currently run a base policy of "balanced security and connectivity".Currently, my IPS is 477 alert rules, 9512 block rules. I ran the recommendations, and it went to 1 alert rule,...
Hi,I have exported an ACP from on FMC 2500 onto a blank new FMCv. I have then upgraded the FMCv and plan on migrating that ACP to a newer FMC already in production and migrating two firewalls. My issue is when I imported the ACP onto the blank FMCv I...
Resolved! PBR with AnyConnect
I'm having trouble figuring this out from the configuration guide, and ChatGPT is giving me answer that I'm questioning.I have an ASA (technically a FPR in ASA-only mode) on v9.20. I'm running AnyConnect, but I want to have two groups that each forw...
Hello Team,I have a Cisco PIX 506E device and I've forgotten the password and IP address. I haven't used it for a long time.I would like to know how to find its IP address since I no longer have the password.Thanks in advance for your help.
