hi,i got a 2911 router which currently has a site-to-site VPN working using the 'crypto keyring vrf' (for VRF aware IPSEC).i need to add another site (CUST-2) using the same command but different VRF (CUST-2) but getting the log and deug below. i alr...
Forum Posts
We manage FTD through FMC ver 7.2.7. I would like to monitor a BGP session running on FTD. How to configure syslog in platform settings to collect these events?
Resolved! TX retries dropped packets
Hi,Got my FPR 1010 FTD running between my ISP and UDM PRO all is more or less good.Sry for any stupid questions still a little green in the field.I'm starting to see a high amount of TX retries for my 2 AP's, this has started after the FPR was introd...
Hi to all,i am posting this in order to have your opinion about it.Today our users behind the FTD faced timeouts as well as high RTTs.Digging a little bit i noticed that CPU core 16 (not the other cores) was continuously steady at 100%. After disabl...
Resolved! firepower custom URL feed in ACP rule
My understanding is that URL feeds in FirePower SI are updated dynamically and take effect w/o having to do a policy deploy to the FTD. Does the same apply to custom URL feeds used in an ACP rule? My idea would be to create a custom URL feed on a loc...
Hi,I have a pair of 2110 FTD firewalls in HA that are currently managed locally VIA FDM and have config (rules, routing) on them. I am required to add the FTD firewalls to an FMC, so they can be managed through the FMC. How do i move the configs(rule...
We have several VLANs on the network, and some devices on the management VLAN are experiencing significant packet loss.I suspect there might be an issue with the firewall pair. When I checked the interface for the management VLAN, I noticed traffic o...
hello everyone!! so basically we have one ASA with SFR which is register with FMC which use as IPS using some ACL policy and i need to migrate the ASA to the new FTD does ASA backup more system:running-config hold the SFR-FMC IPS policys? is not then...
I have an odd situation involving two ASA firewalls.Firewall 1 is our main firewall, an ASA5585-X. Firewall 2 is an ASA5506For reasons that aren't germane to this problem, one of our research groups is required to place their server and its attendant...
Issue:After software upgrade on the FW the VPN session not recieving the right Group-Policy from ISE. Even when ISE gets all the information of the user from AD (no change here), the authorization policy that was matching before is not matching anymo...
We are moving our primary internet to a new location and will have a new public IP and gateway. Is there a way to assign the new IP to the outside interface of the FTD, and somehow keep all of our Site to Site VPN tunnels using the existing IP (yes, ...
Hi theirI m using cisco security manger 4.7 every thing was normal but now i can't find all my firewalls on the device liste, even though i can see the events detected by the disappeared FW, Also adding a FW to the device liste, it disappears direct...
Hi everyone,days ago when i open CSM client i noticed my device list is empty. all firewalls was disappeared.when i check CSM's process status, DCRServer is shown as "Failed to run".After checking DCRServer.log, its look like there is a expired certi...
Hi, We are migrating Cisco ASA5555 to Cisco Firepower 2100 ASA, is it possible to transfer the license that we have on the ASA5555 to the new Cisco Firepower 2100 ASA? if it is, can you please share the Steps and Procedure on how we can do that. Than...
Hi Guys/Galls/Other, I've deployed a Firepower 1120 with FTD on FMC. However I'm a bit miffed that the chassis name on the device management page is just "Firepower:443"Is there a way to change this or am I out of luck because the chassis manager ju...
