Hi, Is there any way I can change management address of a virtual FMC without first remove the FTD from the FMC and then re-register the FTD after I changed the IP address?The issue is that the customer already have VPN tunnels configured and there i...
Forum Posts
Hi,I have a mixture of ASA5506-x, 5515-x and 5525-x in my environment.The 5506-x firepower version is limited to 6.2.3.16.There ASA5515-x and 5525-x can go up to 6.4.x version.All these devices are currently managed by a centralized FMC and I would l...
Hey all. We're experiencing difficulty allowing traffic from our outside web server's public IP to our internal SQL server on a specific port, on our 10.10.10.1 private network. We have web services for our customers to use that interface through IIS...
Hi Tech guys, in my Internet edge deployment, My FTD (21110) is behind the ASR1000 Router(Internet Gateway). I want to allow any connect vpn clients to establish vpn connection to FTD via NAT Configured on ASR1000. From the Firewall perspective, I...
Resolved! Fire Power IPS License issue
I have a ASA 5515-X Firewall. I have also installed 'sfr module' onto the firewall. I purchased a FirePower IPS License (L-ASA551-TA-1Y). But after download the License file I saw that, this was (Control+Protection) License. I just little worried, is...
Resolved! Cannot input data from AD to ISE
HI I want to input data from Active Directory to ISE. Now I notice the issue is both ISE and AD cannot integrate well. Please see the picture below. The correct domain is abcd.local, but what i can see is ISE1.ise1.com instead of ISE1.abcd.local. Can...
Resolved! Cannot access FTD management Interface
In my lab, I previously had my FTD management interface on the same subnet as my inside network. The inside network is using the FTD Inside interface as gateway and everything was working without any issues. I recently created a separate management n...
I just started with an organization that did an ASA to Firepower conversion and then significantly modified and updated the Firepower configuration. The Firepower is not yet in production. Looking at the history of the ASA (a 5520), I think ages ago ...
Resolved! ASA 5555 Multible Vlan Access
I have an ASA 5555 and can access the internet thru it just fine if I am on the same network as the inside interface but when I add a next-hop to my test router to have another vlan access the same firewall, the traffic never makes it to the internet...
Hi Guys, Im pretty new to Cisco and im setting up an ASA 5506-x for the first time. I am not able to communicate between the sub interfaces on my ASA. Everything else is working fine. I have 3 sub interfaces: 1.vlan 10 (10.0.10.1/24) 2.vlan 50 (10.0...
Hi,I really need your help on a certain configuration.I tried deploying two FTD-2110 on my network.After all configurations, workstation connected to vlan85 whose gateway is patched on FTD_1 could not reach a workstation on vlan_10 whose gateway is p...
Resolved! Cisco ASA 5525 ruleset
Good morning/afternoon/evening depending on where in the world you call home. Hoping this is an easy one for you all. My boss has asked me for a copy of the rule-set from our firewall. I did the copy start tftp command and have the start-up config ...
Hi, we have internal client talking to outside but I cant see ant traffic on FTD and Looks its communication is not reaching at that level and breaks at SSL handshake. Server guy confirmed me that ssl handshake is not completing. Can I capture ssl ha...
I have a group of Firepower 2100 devices all in a HA pair and have noticed this similar issue with each pair after upgrading. We were on code 6.2.3, and then performed upgrade path to 6.4 then to 6.4.0.9 All of this goes well however after some time ...
Besides VPN and Leased line Is there anything else besides this to prove the security?
