We're upgrading our infrastructure between buildings and want to know if we can have two (Inside Interface) inputs to a Firepower 2110 to a single (Outside Interface)? We have a standard collapsed core network with a two FWs in a cluster in one buil...
Forum Posts
Hello can someone please help me. After i connect endpoint to switch i get the guest portal and login aswel but i am not able to get access after. Please help. ThanksOverviewEvent 5417 Dynamic Authorization failedUsernameEndpoint Id 70:5A:0F:2A:47:DE...
What is the reaction of ASA to a gratuitous ARP from another system? Does the ASA wait for ACD (RFC5227), does it accept the gARP immediately or ist there any possibility to tell it how to act upon gARP's? How long does it usually take until the ARP ...
I need to do a reimage of a Firepower 1010 and need to remove it from FMC. Since this device have some L2L VPN tunnels, I receive the following error, when trying to delete the device The Device 'FTD01' cannot be deleted because the following VPN Co...
Resolved! Migration from ASA to FPR 2110
Hi I have to migrate ASA 5510 to FPR 2110. Looking in the forums, I found we can use Migration Tool , however the procedure use Firewall Management Center FMC.We do not buy FMC because FPR 2110 should be manageable without itIs there a way to migrate...
I have new pair of NGFW 2110's. I have a virtual FPMC. This is a new build with relatively few rules (10) and NAT statements (14). If I make a simple change to the policy and deploy it, it seems to take a really long time. I'm regularly seeing 7+...
Resolved! FMC Upgrade
Hi Guys, just to confirm, I can upgrade FMC alone to much higher version without upgrading my FTD/NGIPS as long as it is compatible in the Firepower Compatibility Guide, right?Thanks
Hi Guys,I am trying to install an FTD 6.4 into my FP4115 with the native type logical device but it is not installing and the blue dot icon states that it is waiting for the previous FTD to be uninstall but I do not see any other FTD installed in my ...
Hi,We are using DHCP snooping and ARP inspection on our switches which is working fine for us so far with PC/laptops, phones and are now moving Printers on to it and on our 2960x config it works fine but on our 3650's which is running 16.12.4 we are...
Resolved! Allow remote network through firewall
Hi, I currently have two offices/networks connected to one another via Cisco Meraki Site to Site VPN. Office A has network address 192.168.1.0/24 and Office B has network address 192.168.2.0/24. Office B also has a Cisco FPR1120 firewall managed thro...
Hi, As internet provider, we use the JuniperMX80 device in our company.Our JuniperMX80 device has 3200 lines of configuration. We need to convert this configuration to Cisco configuration.Is there any software or support that can do this directly? I ...
Hello, I would like to block some public IP addresses in the FMC in a manual way. When I see it in the events I have the option to select to blacklist it.When I go to that blacklist I cannot add manually. Which is the best way to block a public IP?...
Hello,I am working on a system which needs to configure the date & time of a Cisco Catalyst 9300 Switch.We cannot use NTP protocol to do so. Therefore, this configuration needs to be performed automatically by the system thanks to ssh connection. I w...
Hello! Can't update firepower 6.2.3.16 for some time.Error messages is " Download updates failed: Update file is corrupted "I do not use proxy, and I have 3 devices , all have the same problem.Any ideas how to fix this? Thank you!
Hi allI'm experimenting with an FTD in Azure where I'm trying to allow VPN services through the FTD to a server behind the FTD. I should be a basic NAT setup where I allow the VPN services (PPTP and L2TP) from the public IP of the FTD to be passed an...
