Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...
Forum Posts
Resolved! FTD upgrade via FMC
Hello, I need to upgrade my logical FTD Devices from Version 6.2.3 to 6.4.0.7... i have a couple of queries regarding that listed below : 1) I need to upgrade to major version 6.4.0 first and then apply the patch 6.4.0.7 ? is this correct ?2) My FXOS...
On a 5585 - I have multiple subinterfaces defined on mutiple interfaces. Each subinterface has a VLAN ID and a /24 subnet. I also have global dhcp relay servers configured and then dhcp relay ensabled on specific subinterfaces that I want to allow PX...
Noticing that the rommon versions required for different OS / Firepower versions are varied, got me looking for a chart / table of the rommon versions to ASA OS / Firepower versions. Does something like that exist? Is it always a good idea to upgrad...
I'm working from this document: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd64585/?reffering_site=dumpcr but the content is lacking a bit of polish and wondering if anyone has been able to get this working. Right now, my flexconfig is puking...
Today I updated our FMC HTTPS certificate. It shows updated on the FMC under System>Https certificate. However the web browser is showing invalid. The Dates have updated to the correct dates but it still shows invalid. I tried rebooting FMC but the c...
Hi, I'm trying ASAv on AWS and I found it behave unexpectedly. I created a new VPC with a new subnet, start an ASAv instance with only one management interface in that subnet, and put an RHEL instance there. When I ping from Linux box I get pr...
DY-BB-1#sh moduleMod Ports Card Type Model Serial No.--- ----- -------------------------------------- ------------------ -----------1 4 CEF720 4 port 10-Gigabit Ethernet WS-X6704-10GE SAD112102EN2 48 CEF720 48 port 1000mb SFP WS-X6748-SFP SAL1122PWRX...
Hello All, When attempting to Register a new SFR Module to our FMC I receive the message: "Could not establish a connection with device." I know for sure the reg key is correct and I am able to ping each device from the other without issue. The ...
Hi, somebody can Help Me, I am using Python for obtaining SNMP information of my CISCO devices, but I have a problem with my Firewall Fire Power model 2130, I configure the SNMP V2 but when I try to obtain information using OID path for Memory and CP...
Every since I upgraded FMC from 6.2.2 to 6.4, VPN users show as unknow user. I have a case open with TAC with no resolution yet. Any thoughts? I think it's occurring with multiple clients for I just tested another one. Also, any recommendation for a ...
We currently use an FMC 4500 in our Region that manages our ASA 5545X SFRs that are at our branch offices. We want to use the URL Filtering function on the 5545X at the branch office level. I think we are ok here... The question is the SSL Inspection...
Resolved! How to get Control License for ASA 5506
Hi everyone,I am having a hard time getting license for a new ASA 5506-X.I got the PAK then enter it Product Registration page at Cisco.com. I have reached Step 2 as showed in the picture, I am trying to get a license but it asked me to enter License...
Hi All, I am trying to figure out if we can multiple security zones on same etherchannel. For example: inside & DMZ We have 8 ports on the ASA(standalone) and was thinking to create either one of following. 1- create 2 ports etherchannel for Inside ...
Hi,I have a site-to-site VPN with one of our vendor. Since they have similar n/w with our internal network, we are using NAT in ASA. Now the vendor is moving to Azure and using the same network (local). They are replicating their servers from on prem...
Hi I want to bypass SSL decryption for few websites like Google, Apple, YouTube using DNs. How can I add that if certificate issued to Organization is Google LLC then do no decrypt? I tried O=Google LLC, didn't worked. I tried CN=*.google.com didn't ...
