Is it best practice to create one security zone per interface, or should interfaces with some common traits in terms of the services behind them be grouped into the same zone?For example, if I have 10 interfaces, would you typically create 10 zones o...
Hello, In case someone will run into the same issue. You may not be able to use Secure Client (anyconnect) with Firepower 1010 platformI was trying to use Secure Client on Firepower 1010, uploading packages for Windows, Linux and Mac. Upon deployme...
a bunch of our FPR 1010 running ASA 9.22(2)32 keep crushing randomly and then the console is flooded with non stop logs and everything stops working. I was wondering if any of you out there with the same setup have experianced something similar.here ...
On the ASA, I could generate a keypair and CSR to then be submitted and signed by a CA etc.. For the FTD devices, can this be done from the FMC or do we need to use OPEN SSL? All I am looking to do is generate a keypair / CSR and get it signed et...
HiQuick question, Is it possible to Configure a RB VPN on an FTD using a Loopback Interface.??I ask because I have been requested to set up one but the thing is the peer IP I have to use my side is not one of the FTD Interface IP Addresses, Also is t...
Good morning everyone,My company recently purchased 2 3105 FTD's, which I currently have staged ready to begin configuration. Yesterday I spun up a vFMC in our vmware cloud and attempted to transfer mgmt of FT-DFW01 to the vFMC. FMC & the FTD were on...
Dear Team, Does anyone know how to enable MS-CHAPv2 authentication (instead of PAP) for the Identity Source in the FDM ? Recently we have upgraded our ASA-5508X to FTD and everything works like a charm except one thing - our NPS/Radius server was con...
What is needed to migrate from an old ASA to a new one? Is only copying the config to the new one? How about the SSL certificate, how can I move it to the new platform?
Hi we have a pair of FPR2120 here, and when we are building config even with webvpn not enabled, after a reboot we get:INFO: Webvpn system is not initialised*** Output from config line 378, "webvpn"Firewall is running in appliance mode. Smart licensi...
Hi Team, we are running some api query to internal partner but FTD detects the blow URL in the traffic and blocks the traffic. https://ecmsvc.comanyone has faced this issue ?
Hello Team,Is there any update regarding the enhancement
Has there been any progress on this item. It would make our work with Cisco Firepower 1000 series devices much simpler.
have had scanning threat enabled for years. New assistant typed "no shun" instead of "clear shun" and now the "show shun" doesn't show anything. Usually have about 100 in a matter of minutes. Have turned on and off via GUI and verified the config ...
This started suddenly, without any configuration changes on our end. I've noticed that Cisco's recently published SRU packages have dropped significantly in file size (from the usual ~40-50MB down to ~19MB in the last 3 consequent releases, and this ...
Hello Pros.How to fix vulnerability CVE 2025-20197 thru 20201 on Cisco 4300 Router and 9200 Switches. What IOS XE version will fix the vulnerabilities for a 4300 router and a 2900 switch. Thanks in advances.
