Hi SMEs, I have a requirement to migrate Juniper SRX firewall policies (including NAT) to a Checkpoint Firewall. The conversion has already done now it is verification step. Provided that Juniper(Cisco also falls into this category) has pre-routing N...
Forum Posts
Hi all, I have a VPN configured in Firepower 2130 with FTD appliance. FMC sometimes shows IPsec SA is inactive due to User requested. What can be reason of this error in Site-to-Site VPN?
Resolved! FTD HA Cabling
HiSo FTD HA pair, presently port-channel from FTD-1 to Switch stack as per attached diagram, is the correct way now to add another port-channel on the Switch Stack for redundancy, so FTD-2 to Switch Stack on seperate Port-channel and make sure all V...
I purchased firewall 5516 model and it has refused to connect to default IP address 192.168.1.1 for configuration and can not further go to download ASDM also what will be default Username and password for ASDM to download
Hello, we have problems, to run the following FMC KVM Version:https://software.cisco.com/download/home/286259687/type/286271056/release/6.6.0 (Cisco_Firepower_Mgmt_Center_Virtual_KVM-6.6.0-90.qcow2)This are the setting for host and the guest system:H...
Hi All.I now have my SG500 and ISR1841 in production running my home network, all after your previous help so thank you.To further my training I've now added an ISR2901 and ASA5520 into my home lab, I'm working my way through with the basic configura...
Hello,I'm trying to create Site-to-Site VPN between Site A and Site BI have used the following Config:<------------------------crypto ikev1 enable outsidecrypto ikev1 policy 10authentication pre-shareencryption aes-256hash shagroup 2lifetime 86400!ob...
Hi,My ASA keeps having issues with the PPPoE set up. It will establish fine but after about 10 mins (sometimes sooner), the default route will disappear from the routing table and the console will be spammed with the below message:PPPoE Virtual inter...
We are setting up a IPsec VPN tunnel from a local site to an ASAv in Azure. We had to blow away the old ASAv due to a ton if issues and now I cant get the port out of management only. Per docs it says Management is the only interface that will allow ...
Resolved! Firepower Rule Updates
Hi. We are currently evaluating the FirePower for use in a project. Our current test unit is a Firepower 2110 with FTD 6.2.2.2, Managed from the Firepower Management Center. When running automatic Rule Update. (System->Updates->Rule Updates) the tr...
HI ALL,I try to found the data sheet on Firepower 4100 about Dynamic Routing (OSPF,BGP+BFD) and LACP(802.3ad) but I cannot found the document. Can you help for my concern? Thank you.
So I have an issue with a server and host failing on the SYN/ACK (server replies to SYN, however host never receives the SYN/ACK). I only always capture traffic on either the Ingress or Egress interace but not both when just filtering using the host ...
Hi Guys,Anybody here deployed FP1120 appliance but in ASA mode? I would like to ask if it is now possible in ASA to have its dedicated management plane? What I mean is that the gateway of the management VLAN will be my ASA and also I will assign an I...
Resolved! Firepower 4140 Security Engine question
Dear Community, I am trying to configure a pair of 4140 FTD's via the Firepower Chassis Manager. I was able to upgrade the FXOS and build a logical device using the FTD image. However, I am not able to stand up an ASA Logical Machine and upon investi...
Hallo, we have two identical ASA 5585-X Appliances;at the moment we are Connecting the Failover and Stateful Failover Linkby by using external switches;In future we are planing to use an Ethernet cable to connect the units directly with port-channel,...
