Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

HA pair cannot see each other after upgrade to 7.0.3

I have a pair of FMC 2500s running 6.6.7.1 in an HA pair which I've upgraded previously without issue. I upgraded the standby unit to 7.0.3 successfully but when it rebooted, neither FMC can see each other although I can log into either one without ...

Resolved! FMC readiness check fail while upgrade from version 6.6.4 to 7.0.5

Greetings,I ran readiness check before the upgrade 6.6.4 to 7.0.5 on FTD Firepower 2130. I got error message: "SCRIPT NAME: 000_start/410_check_disk_space.shRECOVERY MESSAGE: Not enough disk space available in /ngfw(Filesystem:/dev/sda4) to perform t...

OpenSSH < 9.6 Multiple Vulnerabilities in CISCO C9500-16X-A

We received vulnerability mail from my security team. Could you anyone have solution for this vulnerability CVE-2023-51384 , CVE-2023-48795 , CVE-2023-51385

Displaying AAA username in syslog

Firepower 1010 locally managedFailed login attempts are logged as 'user = *****'I need to be able to see those attempted user names like ASA would do.How can I do that?

Resolved! ASA Upgrade

Hello,I have 3 ASAs I need to upgrade from 9.8(1)>9.16.4(57). Can anyone tell me if I need to go 9.8(1)>9.16.4>9.16.4(57)?Or can I just go straight to the (57)?Thanks,

VPN Tunnel ASA>Palo Alto

Hello,I'm having trouble setting up a vpn tunnel between a Cisco asa5516x running 9.16 (4)(me) and a Palo Alto PA-3430 running 10.2.6 (vendor).First time crossing vendors for both of us.Using Ikev2, both sides have the same phase 1 encryption:encrypt...

Firepower 2100 is out-of-sync

I have a fire power 2100. On both the FMC and FTD i get Time Synchronization Status May 2, 2024 7:33 AM FC is out-of-sync. I have synced the FMC by using ntpdate -u 192.168.0.100. The FTD looks like its the problem since it says unknown. Does anyone...

FMC MGMT PORT

Hi,How can we change the management port from eth0 to eth2 on FMC?Please note that I don’t have GUI access now.

Resolved! upgrading ASA5506 from 9.8 to 9.16

I'd like to know if you have experience with upgrading an ASA5506 from 9.8 to 9.16. I have an s2s IPsec IKEv2 configuration with group 14 and 19. What impact will this have on IPsec? Could you please share your experiences? Thank you!

ASA integration with Active Directory using LDAPS

Setting up a new ASA running 9.18 and trying to tie it into AD. This is replacing an existing ASA that was previously connected to AD using LDAPS. On rhe new ASA I can do test authentication without any issue if I use port 389, but once I switch to 6...

SNMP IOD Values for cisco FMC 1600 to monitor interfaces, and psu

Hello,Can anyone provide a list of OIDs to monitor below for cisco FMC 1600 1. Power supply units2. InterfacesThanks,Abdul Nafey

Possible to change NAT ID for FTD devices registered on FMC?

We have a number of FTD devices that, due to a deployment mistake, were all set to the same Unique NAT ID when registered to the FMC. It all works surprisingly well considering the issue, but only if 1 device establishes its connection at a time. How...

Resolved! Upgrade path for Firepower 2110

We are currently running 7.0.6.2 on the FMC and 7.0.6.2-65 on the Threat Defense units themselves (released 4-16-24). I'd like to continue to upgrade them but it looks like the next "Suggested release" is 7.2.5 released November 2023. Is it going b...

Resolved! CISCO firepower 1140 Local CA Server

hi,i'm trying to enable local CA server on cisco firepower 1140, there is option to enable it using ASDM, but I get error.I tried CLI, and there is no command 'crypto ca sever' in config mode. Does it mean that this device does not have this function...

Resolved! FTD access to external interface

I am unable to get ping replies from my FTD outside interface when pinging from the Internet. I can ping out, through the FTD to Internet address from internal clients. Basically, if I do an nmap scan from outside - I see no open ports on my FTD. ...

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

HA pair cannot see each other after upgrade to 7.0.3

Resolved! FMC readiness check fail while upgrade from version 6.6.4 to 7.0.5

OpenSSH < 9.6 Multiple Vulnerabilities in CISCO C9500-16X-A

Displaying AAA username in syslog

Resolved! ASA Upgrade

VPN Tunnel ASA>Palo Alto

Firepower 2100 is out-of-sync

FMC MGMT PORT

Resolved! upgrading ASA5506 from 9.8 to 9.16

ASA integration with Active Directory using LDAPS

SNMP IOD Values for cisco FMC 1600 to monitor interfaces, and psu

Possible to change NAT ID for FTD devices registered on FMC?

Resolved! Upgrade path for Firepower 2110

Resolved! CISCO firepower 1140 Local CA Server

Resolved! FTD access to external interface

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Change IPS and AMP Policies to enforcement mode

FTD SSE Connector Service down

Problem with ssl decrypt-resign on Cisco Sefure Firewall

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

Migrate cisco FTD from series 2000 to series 3000

ACL on VTY Line Blocks All Connections

ASA Help With NAT for Printer

Does the FMT overwrite all FTD configuration if only selecting NAT

Can't ping from FTD managemnt to FMC