Hello, I'm upgrading an FTD from 6.2.3 to 6.6.1 and keep getting the following errors in the logs: **********************************************************[210113 13:34:41:525] Starting script: 000_start/101_run_pruning.plentering scriptDraining di...
Forum Posts
We want to enable our GEO-IP and use the whitelist/blacklist from connection events. We have a White/Blacklist of GEO-IP objects, we'd like these in the GLOBAL ACP so they are applied everywhere.No matter where I place the GEO-IP block rule, if it is...
HiI Send estreamer from FMC 6.7 to Splunk 8.1 every things work fine except that I cant send original client ip address and HTTP response code.extended option is enable in estreamer.conf:"archiveTimestamps": true,"eventExtraData": true,"extended": ...
We are using ASA and Firepower for internet filtering in Data Center. Our requirement is to control internet access on 'Need basis' only -- Allow what is required and block everything else, this includes the servers. So far so good. We are trying to ...
Resolved! Umbrella AD Connector Upgrade impact
Hi guys, I´ve got the message that we should upgrade our Umbrella AD-Connectors for all AD-Controllers.My question-> Is there any impact if I upgrade the AD-Connectors one-by-one? We´ve got 2 VA´s and 4 AD-Connectors. Kind regardsPhilipp
Hi , I'm configuring FTD HA managed by FMC.I was confused with Monitored Interface configuration when configuring FTD HA. I've outside interface going to router an inside interface connected to switch.If I put standby IP address for monitored interfa...
Hi experts, I'm building the Multi-instance setup in FPR 4145. In each instance should i need to consider the HA links?
Resolved! 6.6.1 to 6.7 Upgrade Stuck
Hello All,So yeah, here is what the log is showing and it's been almost 24 hours, TAC is still investigating and this sucks. Any ideas and how can I stop/fix this. I'll update my post here as soon as I find a solution but I would like to see if anyon...
I have an odd situation involving two ASA firewalls that I'm trying to configure to allow traffic to-and-from both the outside world and our main private network to reach the private network of the 2nd firewall.I have no problems getting the traffic ...
Hi all, I'm trying to setup a IOS(-XE) based ZFB-firewall to filter and block traffic between 2 LAN-segments. I have a list of ports which I want to allow but I find it hard to find an example to match a port in a class map if the port does not match...
I have a pair of 5555-X ASA running 9.3(1) that I plan to upgrade to the version 9.14(1.30). I am planning this as an outage to services that traverse the firewall but am wondering what the true impact will be. Since I have two in an HA pair (activ...
Hi, There would a way to find out SFP serial number for out of band interface. I got Please serial number for ethernet ports and slots. But i did not find serial number of SFP for out of band interface.Model - 4125I have used below commandftd/fabric-...
Shall we able to run selective operating system(.iso) for file behavioral analysis in TG?. For example customer is having only windows 8 machines in their infra....so analyzing the files behavioral based on windows 8 platform on TG will be sufficient...
Resolved! Factory reset
I have two Firepower 1140 with FMCv. I have been running these in my lab environment. I want to move these to production but before I do I want start with a fresh config. I have been trying to figure out how to do this. I don't see a way to clea...
Hi I develop rule register automation application by using rest api. I would like to know rule hit-count and if it possible, last hit date. Surely, I know how to find hit-count via CLI. (show access-list) But I could not find this in rest a...
