Hi, this might be a quick and easy answer for someone. Is it possible to upgrade individual firewall contexts within a 2130 virtual firewall and have them on different firmware? (running ASA). Or will they all get upgraded at once?Thanks.
Forum Posts
Troubleshooting an access error with System Support Firewall-engine-debug and the traffic is hitting an allow rule but says "Pending Rule Order XXX" but never allows the traffic. Can someone explain what this is and how to fix it?
Is there a way to remove interface configuration quickly? I have some decommed ints which are being used by objects and policies. Or is there a way to identify quickly which objects/policies these are and remove them
Im coming from a sophos background and this is my first time using FTD. We have a /29 public ip range that in the Sophos firewall I would just create alias interfaces for each public ip and assign to the physical WAN interface. (then do nat / fw rul...
Cisco switch Catalyst 3850 48 Port PoE - Vulnerabilitycan any one help me to fix the issuetest#sh ip sshSSH Enabled - version 2.0Authentication methods:publickey,keyboard-interactive,passwordAuthentication Publickey Algorithms:x509v3-ssh-rsa,ssh-rsa,...
Resolved! Unable to register FTD to FMC
I'm having trouble adding FTD to FMC. Originally I was managing FTD locally with FDM, but lack of features got me moving to FMC. I ssh'd to FTD, and issues the command configure manager add <FMC IP> <Reg Key> and now it says 'pending' I went on to ...
Hello, I installed pam_radius on a red hat/linux server and configured it with ISE radius authentication. Was able to ssh to it with configured user on the radius server. But one issue is that the user name must be on both of the linux host and ISE a...
We have two FTDs managed by an FMCv. both running 7.2.8. We are still using Snort 2 and will most likely go to Snort 3 after we are done upgrading to 7.4.2.We are thinking about a secondary network appliance that would possibly use snort as part of i...
FMC: v7.3.0 (build 69)FTD 1120: v7.2.5ISE-PIC: 3.2.0.542, Patch 4We have a new integration between ISE-PIC and FMC that we are trying to use in policy. I can see some users are shown in the Unified Events, but many entries show as "Not Found". For on...
Hi,I use ASDM and export Identity cert + PKey from Firepower 2310 ( ASA mode ) and when I import it to ASA 5512 it gives error:FP ASA version : 9.18(4)22ASA 5512 version: 9.12(4)37
Hello everyone! In our organization we have two Cisco FTD 2110s managed by FMC and configured in a HA pair. Until recently, they functioned as regular stateful L3-L4 firewalls. However, a couple of months ago, the authorities demanded that high-level...
Hello, I cant get into the FMC anymore. I can get into the Cisco Firepower 2130 Threat Defense and elevate to expert mode if needed. Does anyone know how to change the password for the FMC through the OS only?
Community,We are trying to change a default behavior on an FPR 1010 platform. the interface in question has the command "no sysopt noproxyarp" configured on it. We are trying to understand how we can use a Flexconfig in FMC to change this behavior ...
Resolved! Trying to enable AnyConnect Alias
I have an existing AnyConnect connection profile that works and has worked as expected for a long time. FTD3110 running 7.4.1.1 managed by FMC. I am now implementing a tunnel-all policy with the exact same settings as the working policy (except for ...
Hi, I have a Cisco ASA 5510 running as a firewall and hosting AnyConnect. Behind that is a server running True NAS which hosts a variety of things. Currently I have it setup with a plex server and the port forwarding works as expected however I would...
