Cisco Secure Firewall Threat Defense Software Snort 3 Denial of Service VulnerabilityIn that vulnerabilityFPR4112 equipment is 7.4.2, and it is guided that the patch is required in 7.4.2.2 versionI would like to ask if it is okay to proceed with the ...
Forum Posts
Hi Team, I've configured Route Based IPSec Site-to-Site VPN according to the guide: Configure Route Based Site to Site VPN Tunnel on FTD Managed by FMC - Cisco When I deploy the config, I'm getting the following error: Refer to the following troub...
I have a legacy ACP rule on an FMC managed FTD with an FQDN as the destination. The FQDN no longer exists but the FTD is continually trying to resolve the hostname. I've disabled the rule (not deleted it) but the FTD continues to try and resolve th...
How to disable the rate-limit alltogether - or at lest configure a higher value than 120 api-calls / minute ? According to the cocumentation: The Firepower Management Center REST API implements rate limiting to reduce network load.The API will ac...
Hi,We're having a Firepower 1120 that does AnyConnect VPN peer and FMCv 7.4.2.1. In the Remote Access VPN Dashboard not all active sessions are shown, compared to the output of show vpn-sessiondb anyconnect via SSH on the FTD itself. Seems it shows o...
Resolved! CSICO FTD/FMC IPS
Hi All,I have an issue with IPS on FMC. I have already added the IPS license into the FTD, but when I try to create a new access policy and add an intrusion policy, I receive the following error: “This rule requires an IPS license, but at least one t...
Hello, I'm running firepower 3100 cluster in native mode not multi-instance. must i upgrade the FXOS ? or it will be upgraded same as 2K
We currently use ISE-PIC as our identity source for identity based policies in our FMC. According to the following EOL notice, ISE-PIC support will end November 30, 2027. https://www.cisco.com/c/en/us/products/collateral/security/ise-passive-identit...
hi out thereWe have a couple of FMC 2600 running 2.7.2-500 which i would like to migrate to a virtual FMCv - i expected if i was on 2.7.2 on both "platforms" it would be simple - but no - when i load the backup on a FMCv running 2.7.2-500 it complain...
Hello everyone, I have a design question regarding software compatibility. We are planning to deploy a Cisco Secure Firewall 3110 and our FMC is a hardware appliance model 1000. According to the official administration guide the minimum supported sof...
Hello, I have this strange issue on a firepower sensor running version 5.4 and managed by FMC 5.4.1.11. I understand it is end-of-life and end of support but we are in a situation that enforced that we address this issue with the existing set up. Thi...
hi out thereAfter i upgraded our FMC 2600 from 7.2.7 to 7.4.2 all FTD's suddely complains about SSE enrollment failure (9 FTD's in HA - 18 ) is this a known feature??
I am going to implement an FTD 1120 but the client does not want a condition greater than 30 min, just registering the FTD to the CDO takes 20 min, the option he gave us is to use a SOHO router but those routers give IP through DHCP, I have already m...
I'm going to use Secure Firewall Migration Tool to migrate only one paloalto firewall VSYS to cisco secure firewall. Is it applicable ?
All, we have been experiencing issues with HA on the latest version of software for FDM based HA pairs. Cisco has number of cases open and they dont seem to have a solution. The problem becomes transparent after the update takes place and it is relat...
