Just checking community to see best option to reach multiple internal say web servers from certain sites across WAN/internet on the FTD?I was thinking say manual static NAT to an object-group which contains the internal server objects or something?
Forum Posts
Dear Team, Cisco Firepower 1120 NGFW peer failed after hotfix update. Current version 7.4.2.1-30 but after update on HA Cisco_FTD_SSP_FP1K_Hotfix_BR-7.4.2.2-1.sh.REL.tar , secondary HA device unable to ping & SSH also not accessible in GUI. Only acc...
Hi All, Have 2 quantity of MX 105 with below part code licenses. Would i need per device licenses or 1 work as im going to configure warmspare Meraki MX Large Essentials EA 3.0 LIC and Support
Greetings - We have a Firepower device managed via FMC and need add a large number of ACLs to the control plane. Adding the ACLs using the GUI is time consuming and cumbersome to maintain. This is a process we would historically script with the ASA...
Resolved! ACME on ASA
I am attempting to use ACME to register a letsencrypt certificate per:https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-asa/222809-configure-certificate-enrollment-with-ac.html#toc-hId-1431558463I've tried it on several Firepower 10...
I am trying to use Secure Syslog over 6514. In the past we used the diagnostic Interface as Source(on other Firewalls), and it is working.I am seeing inconsistencies in the TLS Communication of me new FW. So i remembered that the Trust-point has to b...
Hi All,I have deployed 2x FTD 2140 in a HA mode. These are managed by FMC (version 7.2.3).What i am try to achieve is configure one of the data interfaces on each FTD to use as inband management interface. I will like to use this data interface for F...
Resolved! keep security zone on FMC
Hi CISCO DEV teamCan we please keep security zone under objects on FMC? before I upgraded to 7.4.2, There was security zone under objects on FMC, later, you give it a new name "interface" instead of security zone. you make things complicated. it was ...
Running into an issue with AnyConnect and OKTA SAML with 90 second delay between authenticating and actually establishing the connection. Initial login/redirect/MFA is quick then the client shows "establishing connection.." and 90 seconds later (giv...
Resolved! New ddns methods in ASA 9.15.1
Hi all - has anybody tried to use the new web update-url for ddns introduced in 9.15.1?How I can make it work with dnsomatic.com?My config is:ddns update method dnsomatic_web web update-url https://username:[email protected]/nic/update?...
Hi there,We have two FMC in HA and we need to register a new FTD in a remote branch. We will configure NAT for port 8305 for the remote FTD to reach the primary FMC. According to this knowledge article here, it mentions that a second tunnel towards t...
What is the proper procedure to restore Cisco Secure Firewall Threat Defense configuration that was in HA? I tried using the GUI to Backup and Restore but it doesn't seem to work. Am I suppose to login to both units using GUI and backup each configur...
Port Vulnerability Name Cve id 22 SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795) CVE-2023-48795 22 SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795) CVE-2023-48795 22 SSH Terrapin Prefix Truncation Weakness (CVE-2023-48795) CVE-2023-...
Dear Team,The issue occurred on ASA 9.18(4).22, which is managed by CSM 4.25 SP1.Thanks,Anuradha
Hi all,What's the general consensus about FMC's IPS recommendations? I currently run a base policy of "balanced security and connectivity".Currently, my IPS is 477 alert rules, 9512 block rules. I ran the recommendations, and it went to 1 alert rule,...
