We have a new FMC (v 7.4.0) and copied all settings of External authentication Radius object from older FMC where it worked fine. However Radius authentication to the new FTDs was failing and I found out that CLI access filter can't include "admin" a...
Forum Posts
Resolved! ASA Upgrade, lost ssh access
Hello,I just upgraded a cisco ASA 5506 from 9.6-9.16(4)57 and I cannot ssh into it any longer.Get an error: "server unexpectedly closed the network connection"I can access via asdm.I have ssh enabled and I have ssh allowed form only 2 machines (a loc...
Guys , please help me . is there anyway to get traffic history to specific destination from cisco FMC or FTD?
I am preparing to implement site-to-site VPN across multiple firewalls located at two sites. I will be setting up 2 DVTI hubs, one hub for each site. I will set up the 2 DVTI hubs to be redundant to each other, so in the event that one hub goes down,...
HiWe are looking to deploy an FTD into CDO, now called SCC I believeI have created a SCC tenant and ready to onboard my FTD.How and where do I apply the licences sent to me? the licence is called CDO-SEC-SUB (Cisco defense orchestrator Xaas subscript...
Please suggest.
Hello, We have some FXOS devices, version FPR 4110 and want to upgrade it using REST API. Please help us to understand, if it is possible to do so? If yes, please guide through the correct API documentation/leads.
We checked the box to enable OSCP and lost connectivity to the FMC GUI front end. Tried to run the commands found on line but it says get in "expert" mode but that's not apparently a real thing. I though I was in that mode when we first deployed FMC ...
During a 7.0.0+ FTD upgrade on ASA hardware, has anyone else run into this problem?The local upgrade seems to stop around 82-90%, and never recovers (it proverbially falls asleep at the wheel). Even letting the upgrade sit for an hour+ doesn't do any...
I have a new Cisco ASA 5525x running version 9.14(4)24 and a new SSD module that I want to install. We are replacing an older ASA and SSD that belonged to a HA Failover Pair because the SFR modules were unresponsive, even after multiple attempts to r...
Hello. We have an FPR-1120 with ASA image 9.16(2)3. We have a Smartnet agreement with it. Is there a way to enable geo IP filtering on this image? I know it requires downloading a database with the IPs in it. Is there a subscription that can be ...
Resolved! FWSM nameif command not available
Hi all I am having problem command not available when I want to enter command nameif. Below are my detail: I have a 6503E chassis with hardware below in my lab: Mod Ports Card Type Model Serial No. --- ----...
Hello, Does someome know the license process when running ASA code on a 4100 chassi? I understand that the license method is a bit different comparing when you run ASA code on smaller firewalls, like the 2100 with built-in FXOS, but the documentation...
We want to implement a Cisco Firepower Thread Defense 1150 HA pair and are looking at the opions of adjusting the block page. The documenation is very thin about this topic. We now use a proxy server, that has limited adjustabilities of block pages a...
Hello,On Firepower 9300 (2cpu, 78 cores) after migration from 7.2.5.2 to 7.2.9 i see almost all snort (Snort2) cores are very close to 100% or even there are some 10-20 minutes slots where there are exactly 100%. In such cases (100% cpu) packets are ...
