We want to implement a Cisco Firepower Thread Defense 1150 HA pair and are looking at the opions of adjusting the block page. The documenation is very thin about this topic. We now use a proxy server, that has limited adjustabilities of block pages a...
Forum Posts
Hello,On Firepower 9300 (2cpu, 78 cores) after migration from 7.2.5.2 to 7.2.9 i see almost all snort (Snort2) cores are very close to 100% or even there are some 10-20 minutes slots where there are exactly 100%. In such cases (100% cpu) packets are ...
I had a issue where the HA failed and I broke the HA and reconfigured it and that fixed the issue, but it failed again and I noticed that there is a connection to a switch on both the active firepower and another switch on the secondary firepower and...
Hi,the complete error message is "Failed to install rule update: Another Rule Update running, unable to gain lock"I do know a similar message from CSM when the lock for backup of the Database is set and wasn't removed by the last backup, so this can...
Hello, we've a few Firepower 2120 and 2110, and for snmp-monitoring, we want to activate the https access to the FXOS.on 2 2110 everything's fine, but the 2 2120 I can connect via ssh but not https:the https port is correct and enabledthe fabric-inte...
Trying to upgrade Cisco Secure Firewall Manager and FTD 1120 from 7.2.5.2-4 to 7.4.1-172, howerver when I attempt to uploaded packages to the FCM from local resource repository the FCM indicates file uploaded successfully but does not show in the ava...
I see FMC now supports the updates of FXOS and Firmware of the 4000 series. Has anyone used this feature successfully? Also does this support graceful failover? Or is this still done safer manually?
Hello, I have FTD 3140 running in multi-instance mode running on 7.4.2.1. At the moment only its chassis is available. How can I upload a new FTD image to the chassis? On 4100/9300 chassis manager there was a button "Upload image". Nothing similar is...
Hi,We have just come across a problem. Just wondering if anyone can point us in the right direction. We have RADIUS set up for SSH access on our ASA firewall, which is working fine. We would like to use a console lead and login using the local accoun...
There are 51 that dropped yesterday. Never seen that many at one time and checking them 1 by 1 is slow and a PIA! I have 3 different version of IOS for ASA and FP, so I am having to check 3x51 times. Is there any way to "batch check" if your IOS ver...
Hello All,Looking for some help . All was ok up until today and nothing has changed in the server room . We have a valid contract with smartnet/any connect until Nov2020. Suddenly today my users are experiencing the attached error msg when trying to ...
HiWould having static routes on an ASA with the same IP but with a different subnet mask present any issues?For example:192.168.0.0/16192.168.2.0/24From what I understand it wouldn't present an issue because although they may have the same IP, the su...
I frequently receive logs from my ASA that indicate random IP addresses are trying to establish a VPN tunnel with it: ASA-4-713903ASA-3-713902 Possible unexpected behavior of a peer occured (e.g., loss of connectivity). Group = DefaultRAGroup, IP = x...
Hello, After upgrading a coupple of FMCs to version 7.4.2.1, we noticed that the "Initiator Country" on the connection events page no longer show any data. We tried to manually update the GeoDB file, but we still not seeing any country information. H...
