Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

"Trustpoint not enrolled" on CSM

Hello, I have a problem with CSM. I tried to install a certificate from ASDM and then from CSM, I tried to assign it to the interface. The thing is that when I went to PKI Infrastructure to assign the trustpoint to the selected list it was not there...

Part numbers to order Firepower 2110 with ASA permenant license for offline use

Hello, I am trying to order some Firepower 2110s with a permanent ASA license. Nothing can connect to the internet. I can, however, get a license from the smart license web account, if I must. What are the part numbers for ordering? The two different...

Resolved! Unable To Launch Device Manager From x.x.x.x

Hello Community!I'm sure you've herd this a thousand times before but I've got an issue with an ASA on which ASDM doesn't work. It will not load from either ASDM launcher or any web browser. I'm attaching some pics to show you the errors. Chrome indi...

FirePower9300 clear vty session

Hello,FirePower9300 version 2.0.1.153, I wander how to clear inactive sessions, I've set the idle time 600s,but some vty session still stuck.

Resolved! [FMC] Unable to save a backup or to upgrade

Hi, I am unable to take a backup from a virtual FMC which is managing two Firepower 4110 (HA). The received error is : Registration or CSM state are blocking Backup I have a doubt about the actual version (6.2.0) so I have tried to upgrade it to 6.2....

ASA - how to cancel a crypto ca enroll

The ASA 5510 running v9.02.I did a crypto ca enroll tp_nameand received the Certificate Request.Now I want to cancel this request and use an existing wildcard cert.Other than by removing the tp_name, can I simply cancel the request?

Using ISE 1.2 as Radius Server for ISE 2.6 Guest Access

Hi everyone, I have an ISE 1.2 which support Guest Access. It is impossible to upgrade it because we can't loose the option which permit to active the account at the first login (the option isn't in the 1.4 and 2.0 version and the upgrade activate a...

Resolved! ASA 5508-FTD (FMC License)

I have a simple issue.our customer has ASA 5508-FTD version 6.2.3.5 and they want to order an FMC license, which will be deployed on the cloud. So I want an appropriate FMC license, which must be compatible with FTD version 6.2.3.5.

Cisco ASA 5515-X blocks ip address even the ip address is within the same country i accpeted

Hello, Cisco ASA 5515-X blocks ip address even the ip address is within the same country i accpeted. As some of the community discussion i have seen & check the ip prefix in http://www.find-ip-address.org/ip-country/ . but initiator blocked ip is ...

Resolved! Multiple WAN on same interface in ASA

Since I have never worked with ASA having a multiple WAN on same interface, how this can be achieved? My ISP has given me /29 IP address, and I assigned xxx.xxx.xxx.xxx/29 to one physical interface, set gw, route for gw, nat, access lists, etc. My qu...

Resolved! Cisco IOS with 2FA

Hello, does Cisco IOS Router/Switch supports 2FA without ISE / ACS / AD?? Thanks,Juan Carlos Arias

FMC 6.5 - Deploy progress status not showing

Hi, I've encountered a strange issue on one of my customers virtual FMC. When deploying configuration to a FTD 2100, there is no deployment or task status showing the progress of the deployment and when it's completed. The configuration is deployed w...

URPF issue on ASA Firewall

HiHope someone out there knows a solution, here goesSteps1. user opens a connection which travels across the site to site and hits a server at 3rd party2.the server then needs to reach inet to servers to authenticate the user3. so back across the si...

NCS 5501-SE IOS-XR 7.0.0 licensing

Hello, We bought Cisco NCS 5501-SE which is "Smart Enabled". I've generated a token in Cisco site for a device. Do i understand correctly that command: license smart register idtoken [token]and internet connection is enough for License to activate ?...