HelloWe just installed an ASA 5516-X to productions as an east/west routed firewall. It is Firepower Threat Defense 6.4.0.4-34 managed by onboard Firepower Defense Manager.The DHCP server is 192.168.5.21The inside of the ASA is 192.168.5.1The outside...
Forum Posts
Hello, Hello, we have a topology similar to above. The ASA has a private AS of 65001, and is using the local-as 2322 and and remove-private-as BGP parameters, but the router is still seeing the private AS, 65001 when you type show BGP. Is there a co...
Hi,I am looking to upgrade 2 x FTD 2130 and vFMC to 6.4.0.7 from 6.3.0.2 this week.Am I ok just going straight to 6.4.0.7 or should I go to 6.4 first? Anyone had any issues with .7? It was advised at Cisco Live this week that we get all of our Firepo...
Hi, We have Firepower FMC 6.4 as RA VPN device and Cisco ISE 2.3 as radius server. We have one connection profile and different group policies on Firepower. We want to use different group policies for different AD groups. on ISE we have configured AS...
Does anyone know if there is a way to successfully get a credentialed scan on the FirePower module of an ASA 5516? I just recently had a CCRI (Command Cyber Readiness Inspection) and the auditor stated that I should be getting credentialed scans on...
Hi, I'm evaluating the Cisco Security Manager ver 4.14 installed on a vm-ware machine with windows 2012 64bit with us-english locale. There are two kind of problems: during the installation some of the MS-KB requested cannot be satisfied , eit...
Resolved! FMC HA 6.2.3 to 6.4 Upgrade
Looking at upgrading from 6.2.3 to 6.4 on our FMC 4500s - which are configured for HA. For other minor upgrades we just pause the sync - upgrade the standby - upgrade the primary - and resume the sync. Any experiences with doing similar upgrades - i....
Hello Guys I am getting a little confused with NAT's. Please help me understand it Correctly In the ASA Code before 9, when we have a Static NAT for an Internal IP, your ACL should have the NAT IP as destination to allow traffic from a Client to that...
When trying to change the admin password via GUI (FDM), the "Cannot find the time zone" error message appears (see it attached). The FTD version 6.4.0.4-34
Hi!I want to know whether FTD (without FMC) on NGFW can perform theses functions or not. 1. Tracked Routing- like when the firewall has links to two ISP, and the traffic normally goes to ISP1.But when ISP1 is down, then the internet traffic goes to I...
Hello, I have setup a Cisco Active Directory agent on my network on the corporate network which talks a domain controller on the same corporate network. That seems to be working ok and i can see the agent is running and the polling status is availab...
HelloI use Cisco FMC 4000 series.The registration clean list limit is 10000.The number of hash values that need to be registered is higher than this.Is there a workaround in this case?
Hi Folks, Today evening, i found an error that "Interface 'DataPlaneInterface0' is not receiving any packets" error message on SFR, under Health Monitor. Is this related to interface issues or software corruption on SFR. Since data plane is a...
Resolved! AMP Private Cloud Sanity Check Failling
Hi Sir: My AMP Private Cloud has below error message and I can't update VDB and IOS. Could you help me to solve this issue ?
Hello, I am having issues to allow LAN users to connect to an external FTP server. The issue is that I can see how the user start the connection using the 21 port but then it also tries to open another random port (f.e. 30006, 30007, etc) which are g...
