Hello, I would like to know if it's possible to obtain the serial numbers of ASAs through Cisco CSM, I ask this because our office has 200 firewalls managed by CSM and this labor is complicated when accessing one by one.CSM version: 4.20.0 Thanks in ...
Forum Posts
hi, i used ftd in version 6.2.3.7 AND MY FMC SERVER IN 6.2.3.16 i have this message when i add my ftd in my fmc i use this cimmande "configure manager add X.X.X.X pass "getPeersByRole: unable to connect to db at /ngfw/usr/local/sf/lib/perl/5.10.1/SF...
Hi,In my office we have implemented an FTD v. 6.2.3.13 (ASA 5506X), we want to manage it in a remote branch with FMC.DiagramI have read the cisco documentation:https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fmc_remote_branch/dep...
Hi,I have FMC 1000 in high availability deployments. FMC backups include only configurations. I use the scheduler on an FMC to automate backups. FMC manage 10 FTD with IPS policy. Backup size is approximately 2 Gb. Backup time is longer than 8 hours...
Resolved! cisco ASA failover configuration
I currently run a ASA 5525-X in active/standby routed mode. Is there a way to make the primary unit always be the active? Other firewall manufactures allow you to give the active and standby units a preempt priority level unique to each unit. When co...
Hello Experts @balaji.bandi @Rob Ingram @Marvin Rhoads @Giuseppe Larosa @Marius Gunnerud I want to block 10.170.150.188 IP blocked for Outside interface (Internet access). TMGHQ5516(config)# packet-tracer input inside tcp 10.170.150.188 443 8.8...
Resolved! Update FTD Devices
Hello, after trying to upgrade ftd 2130 from version 6.2.2 to 6.3.0 in a pair of high availability, one device was successfully updated, the second showed an error.entries from the update log on a failed device:admin@firepower:/ngfw/var/log/sf/Cisco_...
Hi All , I would like to know how to monitor threat detection on ASAv . I found some information from link below . I see the command "show threat-detection rate" but I'm not sure this information can show via snmp or oid for detect or not ? And Can s...
Hello Guys, Is there any way to whitelisting TCP/UDP port from Cisco FTD? From the connection events we saw that some of the specific ports are being blocked.
So, we have the need to "whitelist" several domains with wildcards. Now i have learned FQDN objects can't have wildcards in them, but what is the way to go if i need to whitelist wildcard domains for HTTPS traffic, in this case?
Hi Everyone, I would like to know if it is possible to create a VTI on FTD to peer with cloud infrastructure or with other FTD with a S2S VPN and BGP running on top of it. I know this works currently on ASA code since a long time so I would be very s...
Hi,I have a defected asa 5510 that I bought used with a security plus license. Can I move the licence to a another 5510?
Hi, after the power failure, Cisco ASA5506-X Threat Defense (6.2.3.7) can't connect to FMC (6.2.3.7).The output of "show managers" command on FTD is "No managers configured"> show managersNo managers configured. Is there possibility to re regiser FTD...
I have an issue that my connected clients behind the firewall are not getting Internet interface GigabitEthernet0/0nameif Insidesecurity-level 100no ip address!interface GigabitEthernet0/0.20vlan 20nameif VLAN20security-level 100ip address 192.168.2....
Resolved! PUBLIC IP TRAFFIC VIA VPN
Hi All, I have a scenario. We have a VOIP server. VoIP is only accessible publicly for specific ips. i have users sitting on remote location.When they connect with vpn they can configure their soft phones with VOIP private ip but they cannot configur...
