Hey all, I'm migrating from an ASA to FTD (managed by FMC). In the current ASA deployment, we have lots of VPN users that connect to a single tunnel-group and authenticate using local user credentials configured on the ASA. Now for the magic....based...
Forum Posts
While accessing FTD using PUTTY, I am landing on expert mode directly and not on CLISH mode.I tried ctrl+c or exit command to get out of expert mode but it did not work for me. It kicked me out of SSH session.Can anyone suggest if you have faced simi...
Hi,I have Anyconnect VPN setup with SAML authentication. I have to renew Anyconnect cert. Does a new Certificate change SAML metadata? Do I need to update anything on SAML side or this information (metadata) remains same even after cert upgrade. Plea...
Resolved! Firepower 2110 Security Contexts License
Hello EveryoneI have two Firepower 2110 in my network ACTIVE/STANDBY, and it's run in mode: multiple. My question here how many Contexts still I can add, because every FW show me different number, FW1/admin# show context countTotal active Security...
Resolved! Using Flex configuration for PBR
Hi,I am looking to use flex configuration to push a subnet traffic down a 3 VTI tunnels in ECMP.I am wanting the traffic to be load balanced or round robin. How is this achievable if each VTI has a different tunnel IP.
I'm starting to set up some new servers in a Data Center using a Firepower 1140 (FTD) configured via Cloud FMC.The servers are connected to some L3 switches which in turn connect to the Firepower via Port Channels. I have 3 port channels configured, ...
Hello,I planed to upgrade the ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHzInternal ATA Compact Flash, 64MB which met the minimum requirement to upgrade it, I installed the image asa721-k8.bin successfully but once I issued the command (boot sy...
Hello,we would like to upgrade our cisco Firepower HA Cluster (FDM) from version 7.2.9-44 to 7.4.2.2-28I look for the upgrade versions and i see the main upgrade file: Cisco_FTD_SSP_FP1K_Upgrade-7.4.2-172.sh.REL.tarDo i need all the Patches and Hotfi...
Resolved! Firewall 1210 isp failover
Good morning everyone, I am considering purchasing a firewall model 1210, can anyone tell me if it supports ISP Failover?Thanks a lotHave a nice dayGiuseppe
Resolved! About Cisco Firepower 1120
Good morning,We need to replace our old firewall in the company, and we are considering purchasing the Cisco 1120 firewall or an equivalent (the important thing is that it is a recent product). Since we have no experience with Cisco, is there someon...
For the setup, I'm basically running a demo version of FTDv. Also enabled the trial licenses for IPS, Malware Defense, URL, Essentials.I'm currently encountering an issue in which I have to set the action of the Policy to "Trust" to make it work. Set...
Dear Team,I wanted to copy the flash file "asdm-761AAAA.bin" from our ASA to SCP running on a Windows server . Could you please share the exact commands? *******************************************ciscoasa# copy scp: flash:?flash:/.boot_string flas...
I need to access only trusted URL from Cisco FMC to update security intelligence and vdb updates. somebody kindly help me to configure this policy, It is because my system is in isolated environment and only FMC is allowed to access cisco intelligenc...
Out of curiosity, is there an easier way of keeping Firepower updated on application needs when ports change? That or even the initial opening of ports? For example: I will be soon migrating my phone service to Webex Calling from on-prem. The port...
Resolved! Cisco Cloud FMC Reports
We recently opted to go with the Cisco Cloud FMC instead of On-Prem FMC. My question is, has the reporting feature been removed from the Cloud FMC? If so, what has replaced it? Below is screenshot of the reporting section from an On-Prem FMC.Thx in A...
