Resolved! how to change the syslog port in FMC
Hi Team,I would like to know if there is a way to change the FCM syslog port.In Web interface there is no option available.Is there a way to change it via cli?
Forum Posts
HelloWe have a lot of clients getting the following error when contacting diffrent sites: ERR_SSL_PROTOCOL_ERROR, we have read that SonicWall and Palo Alto also have these problemes. Solution is to turn off "TLS 1.3 Hybridized Kyber Support" in chro...
Hello everybody, our customer has a ASAv runnig rel. 9.16(1)28. Our monitoring has send an error message that an expiredidentity certificate (see screen dump attached) is still in the configuration. I tried to delete it from the interfaces within the...
Hey all, I'm migrating from an ASA to FTD (managed by FMC). In the current ASA deployment, we have lots of VPN users that connect to a single tunnel-group and authenticate using local user credentials configured on the ASA. Now for the magic....based...
While accessing FTD using PUTTY, I am landing on expert mode directly and not on CLISH mode.I tried ctrl+c or exit command to get out of expert mode but it did not work for me. It kicked me out of SSH session.Can anyone suggest if you have faced simi...
Hi,I have Anyconnect VPN setup with SAML authentication. I have to renew Anyconnect cert. Does a new Certificate change SAML metadata? Do I need to update anything on SAML side or this information (metadata) remains same even after cert upgrade. Plea...
Resolved! Firepower 2110 Security Contexts License
Hello EveryoneI have two Firepower 2110 in my network ACTIVE/STANDBY, and it's run in mode: multiple. My question here how many Contexts still I can add, because every FW show me different number, FW1/admin# show context countTotal active Security...
Resolved! Using Flex configuration for PBR
Hi,I am looking to use flex configuration to push a subnet traffic down a 3 VTI tunnels in ECMP.I am wanting the traffic to be load balanced or round robin. How is this achievable if each VTI has a different tunnel IP.
I'm starting to set up some new servers in a Data Center using a Firepower 1140 (FTD) configured via Cloud FMC.The servers are connected to some L3 switches which in turn connect to the Firepower via Port Channels. I have 3 port channels configured, ...
Hello,I planed to upgrade the ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHzInternal ATA Compact Flash, 64MB which met the minimum requirement to upgrade it, I installed the image asa721-k8.bin successfully but once I issued the command (boot sy...
Hello,we would like to upgrade our cisco Firepower HA Cluster (FDM) from version 7.2.9-44 to 7.4.2.2-28I look for the upgrade versions and i see the main upgrade file: Cisco_FTD_SSP_FP1K_Upgrade-7.4.2-172.sh.REL.tarDo i need all the Patches and Hotfi...
Resolved! Firewall 1210 isp failover
Good morning everyone, I am considering purchasing a firewall model 1210, can anyone tell me if it supports ISP Failover?Thanks a lotHave a nice dayGiuseppe
Resolved! About Cisco Firepower 1120
Good morning,We need to replace our old firewall in the company, and we are considering purchasing the Cisco 1120 firewall or an equivalent (the important thing is that it is a recent product). Since we have no experience with Cisco, is there someon...
For the setup, I'm basically running a demo version of FTDv. Also enabled the trial licenses for IPS, Malware Defense, URL, Essentials.I'm currently encountering an issue in which I have to set the action of the Policy to "Trust" to make it work. Set...
Dear Team,I wanted to copy the flash file "asdm-761AAAA.bin" from our ASA to SCP running on a Windows server . Could you please share the exact commands? *******************************************ciscoasa# copy scp: flash:?flash:/.boot_string flas...
