I have a PFsense and need to convert the rule set to a Cisco FTD , checked Migration tool but there where no alternative. Anybody who as a clue or expireince?
Forum Posts
Firmware 7.0.1-84 is installed. I try to install any firmware. The system reboots after a minute and returns back to 7.0.1-84. Entry in status.log :ui: Upgrade in progress: ( 5% done.36 mins to reboot). Checking device readiness... (000_start/106_che...
Resolved! Firepower 1010 registration
Hello,I'm having trouble re-registering my Firepower 1010 after I changed ISPs from Comcast to Starlink. I used to have a static ip address and I'm hoping I don't have to get a static ip address with Starlink. Is there a way to register the firewall...
I ran into a frustrating but now-solved issue with certificate enrollment via SCEP/NDES on Cisco IOS XE 8300 router. I’m sharing this in case it helps anyone else avoid the hours I lost troubleshooting it.The Issue: Using crypto pki trustpoint with i...
Hello,Recently I've provided a test FTD1010 with image 7.2.1-40. The issue is that my DNS is not working from the Management interface.In FTD cli I can do a "ping system 1.1.1.1" but I can't do a "ping cisco.com", it ends in "ping: cisco.com: Tempora...
Good morning everyone,I am using a CSF 1210CE FTD and I need to publish a service so that it can be reached from two public IP addresses provided by different ISPs.I configured a second external interface, created two static NATs with port translatio...
Resolved! Cisco FMCs and Firewalls
Hi all, we are setting up on Cisco FMCs and Firewalls. They will have 2 FMCs configured in HA.Can you tell me if it is supported to have just 1 E-Streamer receiving logs from the primary FMC or should we have 2x E-streamers with a cert from each of ...
We have an Firepower 4110 running 7.0.4 managed by an FMCv running 7.0.4. We've been dealing with a nat exhaustion problem recently, so I've been watching asp drops to make sure the issue is resolved. In the meantime, I've noticed the firewall is rep...
I am admin of a FTD cluster in a Cloud Delivered FMC, and we are In the process of a migration process. There is over 400 vlan interfaces. We need to be able to shut/no shut them on cue from the ISP etc during the process, and in worst case revert th...
Hey folks, I know this might be a bit off topic, but I’ve been looking into DMCA ignored hosting and was wondering—does it actually protect your content from takedown requests? Is it truly safe or just marketing hype? Anyone here have real experience...
Is there a way to apply the same change to multiple rules within an access control policy?Recently I had to enable logging on every single rule withing an access control policy and now I have to enable the IPS policy to every single rule. Is there a ...
I have a Cisco ISR 4431 with an extended ACL using network/service groups. One of my network object groups is called Abused_IP and I normally add in hosts/network which I suspect is doing port scanning etc when I go through my netflow analayzer. This...
Hello,Have two 3130's. Set up individually and then set them to do HA. Come to find out we are going to use SFMC. SFMC requires the HA can only be enabled AFTER the devices are connected to it. I broke HA and expected the original IP I used for the s...
Resolved! Juniper to Cisco ASA
Hi 2AllWe are moving from Juniper Firewall to Cisco ASA.Are there any config migration tool from juniper to Cisco.Are there any cisco ASA simulator to get some hands on.Is it recommended to have 8.3 or 8.2 software version on ASAAny recommended books...
Resolved! FTD with multiple Outside Interfaces
Hello,FTD's 2110 running 7.4.2.1 in HA. and ultimately trying to setup a site-to-site vpn between this FTD pair and anther FTD pair at our other datacenter. However, right now I'm just trying to route plain old internet traffic out of my second outsi...
