Dear ALL, I'm looking to setup the AnyConnect VPN service, our FMC are using internet IP to connect the FTD FW(no any VPN), i had added the AD server under "integration->Realms", but the connection always failed.I would like to know the AD server is ...
Hello Team,We want to apply secure shell setting to our management interface to access SSH of FTD from management subnetwork only. But we can apply this settings inside or outside or DMZ interface only. Management interface not seen.Primary Managemen...
Hello I have an ASA 5525 that has 9.8(4)20 and I would like to upgrade itI see from Cisco Downloads that the recommended is 9.12 and 9.14 But as it approached its end I would like to know if it can handle it performance wise. Any hints? Regards, Kons...
Data sheet and hardware installation guides don't show the airflow direction of the 4100 series NGFW's. Any know for sure the airflow directions? Thanks!
Hi, I need clarity on firepower vrf as we are planning to go for vrf at firepower.(FMC 2600 with version 6.6.1 is managing FTD9300 6.6.1 in HA)1. if i want to do route leakage from vrf-a to vrf-b, how many routes i can do leakage. what are the method...
Hi All, The company I work for has a few ASA 5525-X firewalls in production, and they seem to be working great. We currently do not have the Firepower modules installed as we filter outbound traffic heavily, only a few IPs can get out. I looked up on...
Hi,I need some clarity on FTD, FXOS and FMC.If I configure TACACS+ for FCM, and Radius for FMC, based on what kind of authentication method that FTD would work.Recently i removed TACACS+ configuration for FCM, so i am not able to login FTD with AAA c...
Hi Guys, I just want to double confirm my understanding for this feature ISE acts as a pxGrid Controller and FMC subscribes to the controller to receive session data. Note: we have a normal install of ISE not ISE PIC... (Not actually used or installe...
Hi AllI am looking at moving from ASA to Firepower for Remote access vpn.Does the Firepower support Dynamic access policies ? i.e access lists applied to different user groups? If they don't, then what are the options? we do not use ISE. Also, what i...
Hey We changed the PUBLIC IP in one site...and now we are trying to establich new IPSEC TUNNEL between both sites (CISCO ASA 7.2 - it was qworking before public IP change) .I was able to establish the tunnel but i cannot ping both ends\remote networ...
I am attempting to stand up a SSM On-Prem server for the first time. It is currently on a test bench connected to a management laptop and a Firepower 2120 supporting an ASA V9.14. I am interfacing via the HTTPS Gui through Firefox with java installed...
Hello, I am trying to connect to the ASAv with Ansible through ssh and i have configured the following:crypto key generate rsa modulus 2048username cisco password cisco privilege 15 aaa authentication ssh console LOCAL ssh version 2 But when i do the...
Dear All, I have an issue configuring PVLAN Trunk for a server that it's not able to configure private vlan itself.This mean following the theory that a private vlan trunk needs to be configured between the switch that is able to configure the pvlan ...
try to open on 5506 port 80 with following syntax on cli object network WEB_SRV host 192.168.1.9 object service HTTP service tcp destination eq www object-group network Internal_hosts network-object 192.168.1.0 255.255.255.0nat (inside_6,out...
Scenario and Objective:We have two Azure Subscriptions, In one Azure Subscription (Subscription 1), behind ASAv firewall (ASA04) there are two networks 192.168.10.0/24(inside) and 192.168.20.0/24(DMZ). In the second subscription (Subscription 2) behi...
