Im attempting to use /api/fmc_config/v1/domain/{domainUUID}/object/internalcertificates/{objectId} to replace/rotate the LetsEncrypt certificate on the FMC. I get a 200 response, but the certificate does not change.Has anyone successfully done this?...
Forum Posts
Problem: "show conn flow-rule qos" [followed by any input] gives "Syntax Error: Illegal parameter" Fix: first enter "system support diagnostic-cli" and then "enable", THEN you can run e.g. "show conn flow-rule qos 268444269" I first found the qos r...
Cisco has announced that FirePower Management Center for Virtual Classic license (PAK License) SKUs are end-of-life and will be replaced by Smart license SKUs. Last possible end date when ordering or renewing SWSS for the affected SKUs is April 30, 2...
Issue Description: %ASA-6-611102: User authentication failed: IP address: 172.x.x.x, Uname: ***** Username hidden for a syslog message 611102 even though no logging hide username is configured. Environment: ASA5516X Version 9.16.4.57 It looks lik...
Resolved! Anyconnect with SAML connection issue
Hi All,I have configured Cisco AnyConnect to authenticate with SAML and O365.When I connect, I am presented with the login page at which point I enter the password and then authenticate from my mobile phone. However, when it's 'authenticated' I get a...
Good dayI have sent up Anyconnect remote access vpns which are being authenticated through an AD for Duo MFA. Previously using local AAA, would lock users to a specific group. How can I achieve the same when the users are now connecting from AD. Rega...
I'm trying to upgrade the firmware of my Cisco ASA 5515 from 9.1.1 to 9.8.1. I know I need to go to 9.1.2 before I can go to 9.8.1, but everytime I try to copy 9.1.2 to flash I get the error "No Cfg structure found in downloaded image file" I'm not e...
Resolved! Backing up config, FTD and vFMC.
Hi. I am most of the way through implementing an ASA 5508-x, controlled by a vFMC. Both are running 6.2.2.0 of the FTD and FMC software. Since the configuration is quite complex, and I would hate to have to do it all again from scratch, I figured...
Hello everyone. Has anyone had this problem before? my secondary device is keeps failing And it's keep telling me (Event description: Interface check This host:1 single_vf: diagnostic Other host:0 ) That I looked at the management interface I ever se...
Hey guys, New to this area, would like to ask a question about configuration converting between ASA and Firepower 1120. I used the migration tool to convert the configuration from ASA 5516-X into FTD with FMC (Firepower 1120), there is an ACL in ASA ...
HiI will deploy a CSSP Proxy Virtual Machine to send events from my ASA firepower devices to cloud. For the configuration of send Syslog events to this Virtual Machine I get some questions: Also I want to know if is possible to configure 2 syslog ser...
Hi, my company uses a Cisco 4115 FTD version 7.2.7 to provide remote access for company employees. Cisco Secure Client and Cisco ISE are used as part of this solution. In a recent penetration test, the auditors advised that we disable cipher suites t...
Hi community, we want to deploy firepower 3105 - version 7.3.1 to bridge two VLAN(119 & 191) on distribution switch and allow two network to communicate with the same subnet as following we have run the following test with 10.127.190.11 and 10.127.1...
Resolved! implementing private VLANs on Firepower
My department is looking for implementing private VLANs on Firepower 2000 and 4000 series. Is this feature available or supported on FTD/FMC? Thanks in advance for the reply.
hi,i got a 2911 router which currently has a site-to-site VPN working using the 'crypto keyring vrf' (for VRF aware IPSEC).i need to add another site (CUST-2) using the same command but different VRF (CUST-2) but getting the log and deug below. i alr...
