I'm looking to provide guidance on router config, this I can do, been in networking for over a decade now. However, the one area where I'm less confident on though is in Security. Specifically, in the details of ciphers, hashes, and key exchange algo...
Forum Posts
Is there a FMC API to get1) Realtime performance metrics for CPU/Memory/Disk. 2) Tunnel (VPN/Site-to-Site) performance metrics (e.g. latency, jitter, packet loss) managed on FTDs.Tried following APIs but no helpful to get intended output:/api/fmc_con...
Qualys scans of our FMC and FTD are flagging older SSH protocols and algorithms that we need to turn off. I looked into enabling UCAPL/CC mode but the one-way nature of this change kind of scares me. Besides, I feel like all I need is to tweak the ...
What would be the process and steps required to migrate URL filtering from a Smoothwall to a Cisco FTD which is already in place?
There are several ssl decrypt rulesRules for category - 3 do not work. And traffic is being decrypted.The main rule -6 informs that there are no categories in the rules -3. What's wrong?
Hi,We have FMC 7.4.2.1-30 and Firepower 1120/1150 with the same release. Every morning the FMC wants to deploy the following changes on all firewalls, although nothing has been edited on the FMC during the night:dns server-group DNS_Intranet no domai...
In Cisco FTD firewall, Do the multiple CUSTOMER VRF on our OUTSIDE use the same AS number? with reference documents
There is requirement of disabling SIP Alg as due to some issue in voice call which get disconnected after few minutes . It has been suggested to turn off SIP Alg in our Cisco Ftd firewalls . What would be the impact on traffic and how can I disable S...
Hello ASA 9.20 release (on FPR2100 device). I had a TAC case about TACACS+ Remote Address = 0.0.0.0 in certain Authentication Requests (when using public key auth, and also in Authorization requests) - the TAC told me to "no ssh stack ciscossh" - tha...
Resolved! FTD Reference Bandwidth
Hi all. Im trying to configure OSPF on a FTD firewall trought FMC. The idea is to tunning the Ref Bandwidth to be homologous on the nexus neighbor side. Reference bandwidth unit is 100 mbps Actually the Ref Bandwidth is by default on the FTD (7.4), i...
I'm trying to test a FTD in AWS. I'm using the PAYG AMI (ami-04d7dfdc0d700e259). I assumed it would include the required licensing as it a PAYG. Fortinet, PAN, F5 etc include the licensing with their PAYG AMIs.When I try to add a new IKEv2 policy usi...
We have a ASAv in Azure that is only used for AnyConnect. We have a Site-to-Site between Azure and a Watchguard FW at our Colo. The tunnel is up but I can't get to anything in the Colo while connected to the Secure Client. I can get from Azure to the...
Hi,Is possible to use the Security Intelligence Network Lists and Feeds (custom feed) on ASA 9.14? (no firepower)The requirement is to block a list of Ip taken from internal threat intelligence managed outside the ASA.Thanks.
Has anyone ran into the issue where logging into ASDM for a Cisco ASA 5516-X give the following error:"The certificate present in this device is not valid. Certificate date is Expired or not valid as per current date"How could we renew the certificat...
I am getting this error when trying to launch ASDM. New install of Windows 10 Professional. I have been running this successfully on other Windows 10 PCs. Has anyone seen this and know the fix?
