Hi I just want to find out if this is normal as it is a pain to the troubleshoot devices that hits my deny policy as every Dot1x sessions has a MAB failed session then a Dot1x session permit session. My switch config does specify to use Dotx1 first ...
Forum Posts
I have done a bunch of researching and I have tried some troubleshooting when the problem occurs but I'm just coming up empty-handed. This is really frustrating my family and myself. We have TimeWarner cable. From the Motorola cable modem I go righ...
Hello, While migrating ACLs from old ASA to new FTD managed by FMC I came across this situation.Network administrator were using 255.255.0.255 mask to cover 1st, 2nd and 4th octet and let 3rd octet be flexible in ACLs to be used with for example this...
Hi I have an issue with Allowing traffic to Office 365 through our Cisco ASA 5525-X firewall using O365 FQDNs. We have an internal vlan that needs to use O365 for emails. I have allowed traffic on the following ports but the traffic is being blocked...
HiNew to firepower api. Any tips on creating scripts?Can you give an example of API with1. adding a new ACL2. Removing an existing ACL3. Adding an object (like ip address)I already have these items in excel. Ideally, there would be a process to sav...
Hi, I've been developing a lab of integrating FTD and FMC with an Active Directory to test Passive and Active Authentication. With Passive it works like a charm, I applied several policies like URL and Application filtering to users authenticated b...
Hi all, i've recently set up cisco anyconnect on a cisco5525X appliance running ver9.14(1)10, i'm using radius via Cisco ISE v2.7 which is connecting to active directory I've come to configure password resets for users with expired passwords, I have ...
Dear Cisco professionals I was wondering if my Firepower system is running with a recommended versioni am currently running 1- FMC upgraded to version 6.4.0.72- VDB upgraded to version 3373- SRU upgraded to version 2.9.14.64- GeoDB upgrad...
Hi all, I've got a problem with DNS requests (IPv4 and IPv6) through our ASA.A windows clients asking the DNS Server for the IPv4 Adress of a internal hostname.At the same time (within milliseconds) the clients sends another DNS query to the DNS serv...
Hello Cisco Community Team ,i have FTD And FMC 6.6.0 - 90 iam not able to get SSH For FTD were as FMC SSH is successfully working .i configured access-list in GUI for inside network access for ssh , let me know if i missed any thing .please find atta...
I would like to know wether the Firepower User Agent is compatible with active directory in spanish. Thanks in advancedChristian
Hello Guys,I have FMC 6.4.0.9 and 2xFTD, I configured all config which I wanted and push it to FTD, but FMC still show me that is something to deploy. Please see attach. This is strange because when I click deploy, and it's finish and once again clic...
Resolved! Cisco ASA 5545-X Threat Defense High CPU
Hi Guys, We have Cisco ASA5545-X Threat Defense deployed in our infra and it is managed from the FMC.We observed a continuous spike in the CPU and it stays at 100% all the time. Not sure why this kind of behavior. We checked from the CLI and there it...
On an ASAv in Azure how do you change the default static route? When the ASAv is created in Azure the default static route is bound to the management interface. I have setup an outside interface which I need to route my data traffic through. The ...
Hello everyonewe're running two Cisco ASA 5525-X with firepower services in HAFTD version 6.2.2FMC version 6.4.0.4I was trying to upgrade to FTD version 6.4.0 but i got the error (remote installation fail)with no further details, a couple of days pas...
