Network Security

Hello, I am working on setting up HA for FTD appliances for a customer. I have been using the syntax aaaa.bbbb.xxx1 and aaaa.bbbb.xxx2 usually for assigning interface virtual MACs on the primary and secondary respectively. I have the below queries re...

Hey Folks, Recently I updated FTDs and FMC to 7.2.8. After the upgrade, I noticed unusual behavior on "Cisco Cloud Configuration".  On all FTDs, I got the below error after upgrading, even though it was not raised before the upgrade: Threat Data Upda...

Hi guys, is there a document that contains CISCO OIDs for SNMP Usage? I am trying to manipulate a router/switch's arp cache and ip routing through SNMP via their OIDs, but to no avail.Thank you

ciscoasa# show int Interface GigabitEthernet0/0 "outside", is up, line protocol is up Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps) MAC address 001b.2ac2.5068, MTU 1500 IP address ...

Hi support team,We have 2 FTD named EXT1 and EXT2.  Before HA BREAKEXT1 - PRIMARY STANDBY READY EXT2- SECONDARY ACTIVE Now I did BREAK HA from FMC for the high availability. I'm able to see no connection on EXT1 but the previous active is now handlin...

what is the recommended migration process from ASA 5525-X to FPR 1120?

While trying to insert WCCP into the FTD, the configuration was wrong, TAC gave me the wrong type of ACL which broke the configuration of our running FTD. I have very limited knowledge of what or how flex config is. I need to remove the wccp part of ...

I have two locations connected by dark fiber. At each site is a router with BGP to an ISP, the routers use iBGP between them, one is the default GW with HSRP. At each site is a 3120 with an FTD instance.  Today I connected one between the inside inte...

Hello! We are experiencing an issue where, if one of the members of our firewall cluster, for example, the passive member, reboots, after the HA is restored, the active member loses the user identity information collected from the passive identity. I...

Running on a FP2130 with 9.18(4)34 but the same problem seems to occur on 9.18(4)40.I am trying to have a user belonging to multiple groups map to a single ldap attribute-map mapping the memberOf a group to IETF-Radius-Class for the group policy.The ...

Trying to follow DISA SRGs, and one of the requirements is to enable FIPS mode on our 2140 FTDs, managed by FMC. I am new to these so was doing some searching online and it sounds like CC compliance is what needs to be enabled.Am I correct in saying ...