Hello Everyone,I have recently used cisco firepower 1120 for one of our customer, without any additional licenses. So as per my undertanding all the firepower comes with base license as perpetual. So, I proceed it with basic configuration, which give...
Hello dear communitywhen trying to migrate an ASA v9.18 to FTD managed by FMC using FMT v7.7 tools. i have the below message error:NoneType' object has no attribute 'cryptoMapNameEntry'we have no cryptomap configured on the existing firewall. any ide...
Dear community, I’m trying to use Cisco’s migration tool to migrate an ASA config to a FTD but I’m facing issues running it. Indeed, it tries to reach out cisco but it fails: 2023-12-28 14:35:21,125 [INFO | common] > "proxies : {}" 2023-12-28 14:3...
Is a Cisco firewall capable of microsegmentation? Can it handle east-west traffic and monitor traffic within the same VLAN?
Greetings all. I have this little network I am working on and I have just came across an issue. The command I am trying to implement is"event manager applet BACKUP_CONFIG" . However, my issue stems from the fact that my other switches have taken this...
Hi, Is there a way to extract a list of all devices and there serial numbers from FMC? We are using FireSight 5.4 version of software. Thanks, Dan
Hi,We have an ASAv in Azure, its a single firewall with no load-balancers.Is it possible to add a second public IP address to the ASAv, is it just a matter of adding a new private to public ipconfig setting? do i need to do anything on the ASA such a...
We have Cisco FTD 2110s that are managed with FMC and we are trying to figure out how to block access to our remote access VPN by IP. We already have a geolocation block for Access Control in FMC. But, are we still not able to do geo-ip-based restric...
Hello,I am doing a little lab using SSHv2 with X509v3 certificate client authentication. I have a simple setup:* Windows PC with 2 SSH clients:- Putty with PuttyCAC for smartcard support- PragmaFortress SSH Client with smartcard support*C1121X-8PLTEP...
Is there a FMC API to get1) Realtime performance metrics for CPU/Memory/Disk. 2) Tunnel (VPN/Site-to-Site) performance metrics (e.g. latency, jitter, packet loss) managed on FTDs.Tried following APIs but no helpful to get intended output:/api/fmc_con...
Cisco experts,I am trying to close various ACAS scan results. Plugin 70658, SSH Server CBC Mode Cipher and I am asking what is the correct way to close this finding.The device I am working on is a Cisco Firepower 2130 with FTD. The software versio...
Our current ACAS scans are showing plugin 157288, TLS Version 1.1 Deprecated Protocol findings on Firepower 4120 and Firepower 4125 with FTD devices.The Firepower 4120 is running version 7.2.9,The Firepower 4125 is running version 7.4.2.2I am asking ...
hellodo you know when is eol / eos for FPR‑4145?
Hello everyone! I'm curious if someone had similiar case? I'm wondering is it possible to configure FTD managed by FMC to do additional authentication based on destination host with Yubikey for users that are already connected with anyconnect. I'm tr...
Hello,I was going thru the list of host profiles included in FMCv v7.6 and there doesn't seem to be a lot of options for UC servers. For instance, I found an option for Unified CM but the latest version I can select is v6?? Ideally I was looking fo...
