Dear Team , We are facing issue after apply threat intelligence policy - automatic failover happening continuously Cisco FMC is in VM Software version is 6.6.1 Cisco Firepower FTD - 2130 in HA -- Software version is 6.6.1 we came to know that below...
Forum Posts
Hello I have a new FTD 2120 I have accessed the ASA with ASDM. I would like to update it, but in the ASDM there is no such option in Device Management menu Also in cli the boot system disk0:/cisco-asa-fp2k.9.12.4.10.SPA is not accepted. What am I ...
Resolved! Computer or User certificate for EAP-TLS
Greetings, When working with EAP-TLS the server (RADIUS) and the client (supplicant) need certificates. On the client side, it is the computer certificate or the user certificate ? Thanks,Edouard.
Hi,We have a couple of 5540s (running 8.0(4) that we use only for remote access (client-to-site) VPNs.In the logs we regularly get some entries similar the following:2009-02-16 11:59:39 UTC Local3.Info x.x.x.x Feb 16 2009 11:59:39: %ASA-6-602101: PMT...
I cannot find information on how to view information about the energy storage of the Firepower 2110. I found 'Power Profilng' is turned off on my device. Perhaps there is a way how you can enable it?
Resolved! connect to ASA
hello,I have a ASA with 3 interface enabled: outside, sub1 and sub2we using sub2 as a management interface, we have acl to permit any traffic between sub1 and sub2.computer from sub 1 ssh login from sub1 interface: successedcomputer from sub 2 ssh l...
Hello, Im looking to get a cisco firewall and place it between my two cisco 9200 switches. Currently I have 7 vlans but will eventually see 20 or so vlans on my switches. the vlans must be able to pass through but I dont plan to connect anything ot...
Dear all ,How can I create a LoopBack on my FTD . I dont want my BGP Neighbor to be related to my physical FTD´s interface. I have two links and I´d like my BGP neighbor to be assigned on my Loopback interface.As i know FTD does not have LoopBack.Is ...
Hi colleaguesI need your supports on this scenario, I have made site to site IPsec vpn configuration with remote office, this office send some traffic to specific system (system A) in my network which has ip 192.168.1.30, and i want this traffic go t...
Hello, I ran an upgrade on my FTDs which are in HA(Active/Standby) from 6.4.0 to 6.6.1 version via FMC.. the entire procedure was completed successfully however both the members became active/active once the upgrade finished and the traffic is now fl...
Does the ASA 5585 support ECDHE ciphers like ECDHE-RSA-AES256-GCM-SHA384? I get error message trying to enable them, and I don't see them available: sho ssl ciphers all These are the ciphers for the given cipher level; not all ciphers are supported...
Resolved! Check that you have proper anyconnect package installed in Anyconnect client Software Menu
Hi All (image attached) Since upgrading to the latest version, we're not able to see our Anyconnect profiles in the Anyconnect client profile section on the ASDM, We have created these XML files around 6 months ago. My account has the relevant priv...
I have configured a VPN site to site IPSEC tunnel from ASA to Draytek with IKEv1 and PFS disabled but Phase 1 stuck in MM_WAIT_MSG2. Phase 1 and 2 configs are identical and cross-verified multiple times.What can be the issue?Phase 1 policy used:crypt...
Resolved! ACL on ASA5506 issue
Hi I've just finished creating NAT on my ASA, which is mentioned in another discussion. Now I'm doing a test with laptops, but it seems that I can't get traffic through. I believe it's an ACL-issue. I need to pass all traffic through from both sides....
Hello All, We have an FMC 4600 Version 6.7.0 that manages all of our ASA SFR's in Production. We are wanting to build a two port port channel on the FMC and are not having much luck. I see articles about that it is capable, but there are no configura...
