Network Security

Resolved! Zone Based Firewall - single Zones over more than one interface.

Hi, I have a question. I build VTI's to 2 separate destinations (2 tunnel interfaces) that I would logically like to have as my outside Zone. Added to this a standard Inside and a DMZ. What happens to the "Sessions" noted in the firewall if a session...

Cisco FMC CAC Authentication Explanation Please

Hello, We just deployed the FMC and I was tasked to try and configure it so that we can use it in conjunction with our token cards during the authentication process. I configured an HTTPS certificate that's been signed by my CA and uploaded that into...

FMC RA VPN policies integration with Azure AD

Hi all, I have an issue on FMC caused by migration from on-prem MS AD to Azure AD. The problem is with RA VPN access policies using user-based restrictions. Previously, users authenticated with their on-prem MS AD credentials and gained access to all...

Resolved! Strange Issue of IP Getting Claimed by FTD's MAC Address

Hello All,In one of our sites over the weekend, the Domain Controller there rebooted. When this happened, it looks like some other device went and claimed the DC's 2 IP address. When I ran a show arp and show mac on the switch, I could see that the M...

FMC Object Management - added network objects not seen

Running FMC 6.2.3.3 with multiple domains with FTD 2100. Added network objects which are visible when scrolling through the object pages. But are not seen when using the search filter and entering the ip address or name. Nor are the new objects sh...

AnyConnect Management Tunnel Issues

Hello,Currently we have AnyConnect deployed for our users to connect to the VPN which has no issues on this profile. We setup a new test AnyConnect Connection Profile which has a Group Policy configured to download Client Profile which is the managem...

Resolved! Stable FTD released version and fixed brute force attack

Dear Team, We are looking the stable FTD version can upgrade to fixed the vulnerability and ensure it cover suck of attack like VPN brute force...and prevent AD Account locked out even attacker known the legit AD user. Kindly share commend / good pra...

Resolved! FDM1120 Management Interface IP Address

Hi I have two cisco 1120 firepower running on (HA) i configure the Management ip on both FDM but i cant access ftd gui and also i cant ping able to the ftd. I can access the FDM by Reaching the default gateway on my inside on https:// and i give ma...

FPR1120 (FDM) SSL Decryption Configuration

Good day. Please advise. I issued a certificate on the organization's server fpr2027-2. I installed it in FPR. But FPR continues to sign with its own certificate. Not the one I created, although mine is indicated.

FMC backup

Can I backup my FMC 1600 from cli.I have lost access to gui and there is no backup. Also can TAC restore VMSDB refusing to start?

Cisco Firepower 7.4.2 rules enable outbound traceroute

ouch, posted in wrong forum.I have tried using the platform settings ICMP options to let windows traceroute out to the internet, failed.Another fp admin shared me these rules below. They work, but what else do I need to do to make them secure? These ...

How to access cisco firepower chassis

Hi, can someone please advise how to access firepower 2120? can ping the mgmt ip, but when run https://firepower-mgmt-ip, then failed, can someone pls advise? thanks in advance!

Cisco Firepower FTD with secure FMC : VXLAN

Hi, I am trying to stretch layer 2 over a layer 3 network using VXLAN between two firepowers as the VTEPs. The outside interfaces have been configured as the VTEPs and I have subinterfaces for internal VLANs. I have created a VNI on both sides, howev...

Enabling Port Scan on FTD FMC

Can you suggest best practice for it? Can you suggest some disadvantages of enabling it on internal or external interfaces?

Resolved! 503 Error after upgrading FMC to 7.4.2.1 from 7.4.2

We currently run an FMC environment that manages a pair of Firepower 2100 FTD appliances. WE recently upgraded the FMC to Version 7.4.2.1 from 7.4.2, and we were planning to do the same for the FTD, which are also running 7.4.2. However, now that t...

Network Security

Forum Posts

Resolved! Zone Based Firewall - single Zones over more than one interface.

Cisco FMC CAC Authentication Explanation Please

FMC RA VPN policies integration with Azure AD

Resolved! Strange Issue of IP Getting Claimed by FTD's MAC Address

FMC Object Management - added network objects not seen

AnyConnect Management Tunnel Issues

Resolved! Stable FTD released version and fixed brute force attack

Resolved! FDM1120 Management Interface IP Address

FPR1120 (FDM) SSL Decryption Configuration

FMC backup

Cisco Firepower 7.4.2 rules enable outbound traceroute

How to access cisco firepower chassis

Cisco Firepower FTD with secure FMC : VXLAN

Enabling Port Scan on FTD FMC

Resolved! 503 Error after upgrading FMC to 7.4.2.1 from 7.4.2

Unable to edit and save a text object

CSCwo71835 - The NAS-IP-Address attribute is missing

FMC API to get real time VPN/S2S tunnel and CPU/Memory perf metrics

Firepower 2130 -how to resolve plugin 70658 SSH Server CBC Mode Cipher

Yubikey for authentication to protected applications on FTD

Application PBR in FDM

SSH with X509v3 certificates

FPR‑4145 EOL/EOS ?

Firepower 4125 - how to resolve plugin 157288,

Cisco FMC QoS filtered by application