Network Security

Hi, Can anyone please help me understand how often FTD gets deployed ? I am asking this question because in our environment I see deployment pending on few devices. Also I am seeing "applied policy is out of date" will this effect on FTD's ?   Thanks...

We had a previos TAC case open when the engineer created an asp-drop packet capture. It wasn't deleted, and we're having a problem today, so I decided to crank that up to see what packets may be dropped. Packets are flying across the screen, and I ca...

HI, I have Firepower (FTD) in HA managed through a standalone  FMC, There is  a peculiar issue, Whenever my Primary unit is active and I deploy , I get the error " Deployment failed due to communication Error", So I have to switch over to secondary u...

Dear All,I have a standalone FMC managing 2 FTDs in HA, Recently I observed that Primary unit is showing disabled and secondary take on as active. During trouble shooting,It is found that I could not ping Manager(FMC) from primary unit [FTD]I could s...

Hi, Our monitoring is showing MEMPOOL_HEAPCACHE_0 2% freeCan anybody explain to me what it means and how i can fix the issue: sh verCisco Adaptive Security Appliance Software Version 9.8(4)25 Firepower Extensible Operating System Version 2.2(2.124) D...

Our ASA [ver. 9.10(1)] does multicast routing and the source is directly connected on inside. Every once in awhile a multicast stream (group) does not get forwarded to the RP (outside) and is dropped (show mfib ), and stays dropped. Performing a clea...

Hi all, i'm looking for some clarification.  We have two firepower 1120 which we want to deploy in HA active/standby configuration.I have been reading up on my options around interface redundancy, and as far as I can tell we cannot operate with redun...

Hi, I have Firepower [FTD] in HA, Both the Firepower devices are connected to Nexus (93180 FX).I have configured BGP between Switches and and Firepower,While doing Firepower switchover or  switch failover ( Shutting down on switch] , we observed that...

HI,It's taking long time in active/standby FTD switchover,Is there any mechanism to minimize the fail-over time or is there any config required?  Primary Unit to Secondary unit - it takes 5-6 seconds Secondary Unit to Primary unit - it takes 10-11 se...

Hi FMC/FTDI.m looking at creating an object for EOIP  protocol (97)when I go to add new port object I select other tab and can see ETHERIP(97) is this correct and is it safe to do this, its to allow a capwap tunnel through. Thanks

HI, I am not able to deploy policies from FMC , have tried in many ways but issue remains unresolved, I am planning to Reset the FMC  to facory default setting and start the fresh configurations, Pls let me know the process to do the same I have two ...

Hello everyone, I need some help with licencing. My smart licence is expired. I'm trying to configure ASA but I can't do anything without 3DES/AES alghorythm. So, I have read how to enable it and in order to that I need to generate token. I have gene...

Dear all,I have a network which in this Netwrok my FTD isnt connected to internet because of some security issues. As far as I know, to use AMP, our FTD has to be connected to Cisco cloud. In this scenario, my FTD isnt connected to cloud and the rule...