Hi team, I have configured Cisco ISE as TACAC+ for firepower chassis. i am able to authenticate chassis with TACACS+ credentials.But when i tried to login security engine which is not authenticating with TACACS+ but i can login using chassis local us...
Forum Posts
Hi Cisco Guru, I'm currently using FPR1K running FDM code with outside interface is DHCP. However, since our ISP subscription is dynamic IP and they may sometimes force to renew a new IP and when this occur, my FPR will keep the old IP even disable a...
hello Team, In FTD remote VPN is working perfectly.. and users are getting IP address as per the VPN profile.. the problem is that.. how should the same would work with static IP address.. As per the India DOT guidelines, the customer need to have st...
Hello, I have a simple question to understand the behavior from the ASA side. Once the connection is marked as half-closed , during that ( 30 seconds ) if the ASA will receive a syn packet related to the original connection what will happen exactly ?...
Resolved! FTD 2120 chassis and asa management IP
Hello, I would like to ask about the management addresses of Firepower 2120It has one IP for the chassis management and one IP for the ASA management. By default they are in the same subnet. Is it necessary to be in the same subnet? How do I change...
Resolved! ASDM Firepower tabs missing Java 1.8u271
Hi all, I'm sorry for opening this discussion even if there are many other similar on the community, but none of those solutions worked for me. I'm managing an ASA5516-X with firepower that was working fine with ASDM since some weeks ago.The issue th...
Greeting everyone. I have been struggling with getting an IOS image to ASA. I really need help to identify what I don't understand to remove forward. So far, I'm using a Solarwinds tftp server with the IOS in the C:\TFTP-ROOT file with Server Binding...
Hi all, This is a general query regarding whether there is a feature within FirePower FMC that can send notifications to users when a policy is being (or simply when someone appliance logged in) edited Story:Myself and my team sometimes need to excha...
Hey everyone, I was going through the end-of-life/sale notices of the Cisco ASA at the link below and noticed a mention of "next version of ASA". This caught me by a (happy) surprise because I was recently told that Cisco is doing away with ASA pla...
Resolved! Cisco FTD 1150
Hello All. there is any limitation of using FTD 1150 instead of 2110. another one, is 1150 support failover ethernet interface or just support ether channel? I'm going to order one of these product and i see there is no big different between 1150 an...
Hello. My old 5508-X was a V1 and it crashed and was not qualified for replacement (I have no contract) so I went out and got a new/er one (V5) and everything turns on beautifully and loads my SSD (though it didn't load the config) and so I restored ...
Resolved! Cisco Firepower - AMP/URL License
Hello, I have a Cisco Firepower in place and I wanted to check what happen when an AMP/URL Filtering license expires. Will the Firepower policy stop working (Stops filtering traffic) or does the policy continue to work but I cannot make changes to t...
Hi everybody, I have configured from firepower side Site-to-Site VPN and from Mikrotik side as well. From Mikrotik router I can see that connection between router is established with success, but I can't ping from LAN A to LAN B , LAN C. I tried to c...
hello,I have over 5 years ASA experience, but I don't have any NGFW experience. I wondering if there have big difference between ASA and NGFW ? I mean in the command level...we use ASA for NAT, VPN (IPSec and anyconnect ) ,route, ACL etc...for those ...
Hi team: I need to provide a kind of second option next-hop for redundancy to PBR configured in the FirePower.I would appreciate someone can confirm whether the Fire Power supports more than one next-hop in the route map, for the PBR.In case is it no...
