Hi All, A critical vulnerability, CVE-2025-32463 with CVSS score of 9.3 reflecting its high risk, has been discovered and affecting Sudo in Linux OS. This vulnerability allows attackers or users to exploit sudo's -R (or --chroot) option to execute ar...
Forum Posts
I currently have 2 sites, and each site has (2) FTDs in active/passive failover. When looking at the Platform Settings, they both share a single policy. I need to add another policy for each pair to change their syslog server settings to go to differ...
Hi We are planning on migrating configuration on 4110's acting as an internet perimeter firewall to a dedicated container instance running on 4225's. Problem I see right now is that there are 150+ tunnels configured on the 4110's and it doesn't look ...
Currently, we have one of our NGFW configured for VPN use and able to connect to it successfully. We are exploring the use of DAP for added control in who can connect to our VPN, so, we had configured some basic settings. If we don't have it assign...
Resolved! FTD bandwidth
Hello, I have a customer with two FTD 1010 in HA managed with CDO (no FMC). Previously we were on the ASA platform and, with a little tool called FirePlotter, we saw the bandwidth usage in real time. The tool provided in CDO or FDM are not enough acc...
If primary ISP go down. The secondary ISP is not working in PBR. All configuration is working fine. ISP failover is fine. Only in route-map have problem, the secondary ISP is not workiung
Dear Comunnity: I have the following question can i copy a back up from an FTD administrated via FMC to an Stand Alone FTD managed just with FDR, i cant find any oficial information about this topic, please i need your help
Resolved! Snort3 rate filter
Hello, Im trying to configure rate filter in Firepower Snort3 according to this reference: https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/snort3-inspectors/snort-3-inspector-reference/rate-filter-inspector.html For single rate filter ...
HiSo I am planning on exporting the policies of several FTDs managed by the same FMC running 7.0 I will then be importing the policies to a new FMC which is running the same version 7.0 this FMC will then be upgraded to 7.4 and a My questions are1....
With 45-day certificates in the horizon, it is time to start looking at automating certificate renewals within the FMC and FTD. While adding certificate objects can be done over API, I found many things seems to be lacking - or I am looking at the wr...
Hi to all,i decided to upgrade our FMC from 7.6 to 7.7But when i try to do certain tasks it hangs there, for example when creating a nef flexconfig object it just hangs there or when i try to companre two different NAP policies it hangs there ...This...
We would like to run an ASA on Hyper-V using asav9-18-4-57. On the Cisco we page, we only see below .vhdx available: https://software.cisco.com/download/home/286119613/type/280775065/release/9.18.4 There is no mention of .57 as in 9.18.4.x - what is ...
Good day I have a problem with deployment it's not possible because Deployment is failing due to the policy changes report request in progress
Resolved! EIGRP authentication FlexConfig FDM
Hi, I am trying to set up EIGRP authentication on a port-channel interface on a Firepower 2100 via FDM directly (I don’t have FMC). I have configured a template with a key-chain and also associated this with the name of the interface, it seems to tak...
Hello Experts I have a customer that has a Firepower Deployment and we have integrated into ISE using PXGrid. We have also created an AD Realm and integrated this via LDAP. VPN authentication is making use of a Certificate and when a user logs on or ...
