HiI am unable to add ISR to our tacacs server. Same config works for other devices.Never troubleshooted tacacs before .. any help with understanding the debugs and config would be great. Thank youUsing keyboard-interactive authentication. Password: U...
Forum Posts
HiI am using Cisco firepower 2110 with a virtual FMC 6.3 version. could you guys please guide me how can I block a specific port in our FMC firewall. Like I want to block 8080 port in my entire network because there is a proxy virus that is using 808...
recently setup anyconnect on CSR1000v and it worked with local credentials . All of sudden, Anyconnect VPN is no longer working. CRYPTO_OPSSL: SSL3.0 is no longer supported.Enabling only TLS1.0CRYPTO_OPSSL: Set cipher specs to mask 0x00002080 for ve...
Scenario: Several ASA's with SFR's managed by an FMC for one entity, with one policy deployed with various whitelists, URL rules, etc. We may want to transfer administrative ownership of only one ASA to another entity, along with a new FMC with just...
I have an FMC1600 that manages 2 FTD 2210s. I also have an ASA 5516-X that is going to be used for VPN so we can use posturing. How do I configure the 5516 and connect it so that it communicates with the FMC/FTDs for Firewall protection and also have...
Hi.I would like to know if FTD can detect DDoS Attack in FMC's Intrusion Rule.I am not sure if it is correct because it is searched based on snort rule.======================Random Get FloodingSYN FloodingSYN (ECN, CWR) FloodingACK FloodingTCP Conne...
Hello, I have a issue with tacacs after I upgraded the cisco 9500 stackwise to code 16.12.2!The router doesn't accept the tacacs password but only local password. After authenticated with local password it goes to enable mode and accepts tacacs passw...
Hello,I need to convert the following configuration to ASA:nat (interconnection) 0 10.17.1.0 255.255.255.0nat (inside) 0 192.168.80.0 255.255.255.0nat (inside) 0 10.1.0.0 255.255.0.0could someone help ?Thanks
I am not able to run the Firepower MIgration tool 2.1.X on my windows 10 machine, I get the following error and the tool just exits.1.3 seems to work fine on the same platformAny help much appreciated.Thnx File "C:\Jenkins\Build_virtualenv\penv\lib\...
Hi,I have a very specific requirement as so:When a object-group of Source IPs accesses Webserver_1, permit without NATWhen a object-group of Source IPs accesses Webserver_2, permit without NATWhen anyone else accesses Webserver_1, then permit without...
Hi I am using Cisco Firepower 2130 as an ASA mod. Could you please guide how can I enable SNMP in my firewall for the network monitoring tool. Thanks in advance
Resolved! Firepower 6.4 BGP extended community
Hi legends, I have been asked to replace my clients internet facing Palo Altos with Firepower. I have a couple 9300 FTDs and a 4600 FMC to achieve this. The client has a PE attached to their Palo Alto firewall with sub interfaces and each in its ow...
Hi , I'm running FMC on FTD 2100 and I have 2 VPN errors displaying on my 2 site-toSite VPN's that I can not undesrtand : Please see screenshots : Error 1 : VPN is inactive due to Idle Timeout Error 2 : VPN is inactive due to User Requested. ...
I need to setup HA pair with 4100 series FTD firewall.What is the fail over cable requirements for HA setup? Can I use normal LAN cable?My Inside and Outside interfaces are 10Gbps interfaces.
Resolved! FDM and NPS, test works but can't login
Hi, just trying to setup external RADIUS authentication to our Firepower 2110 boxes, we don't have FMC so it's the on box FDM for config. I've created a security group in AD and the specific policies in the NPS, with the attribute fdm.userrole.author...
