I am doing Reimage according to the instructions https://www.cisco.com/c/en/us/support/docs/security/firepower-1000-series/220642-reimage-a-secure-firewall-threat-defense.htmlDuring the process of loading the image via TFTP server, an error occursARP...
Forum Posts
I’m currently working with an FTD 2110 firewall running version 7.0.6, which is managed by an FMC 2500 also on version 7.0.6.2. I've been tasked with migrating the FTD to a different FMC.I came across this document outlining the migration process.- h...
I have an FMC 4600 managing two(2) FTD 4145 instances. The two instances were working fine and manageable from the fmc. For some unknown reason, one instance disappeared. All policies are pushed from the FMC . At now I cannot see the instance on t...
Migrating firewall configurations can be a daunting task, especially when dealing with complex policies and large configurations. Cisco's Secure Firewall Migration Tool (FMT) offers a streamlined solution to migrate configurations from various firewa...
I am in the process of migrating FTD 4110 configuration (version 7.0.4) to FTD 3120 (version 7.2.8) that is managed by FMC 2500 (this manages multiple FTD instances). New FMC is 2700 (version 7.4.0). FTD 3120 will be soon managed by FMC 2700 once mig...
Problem: Firewall shows it is connected to the Internet, it can sees the gateway. But, we not getting any data through. What We've Tried:Set up static and dynamic NATs, both before and after Auto NAT rules.Used various zone objects and policies (netw...
Resolved! FMC Security Intelligence - logging only
I seem to recall years ago with an older version of FMC setting up the SI so it would generate a event in the event viewer but will not block the traffic. I am needing to setup a new FW with 7.4.2 in inline routed mode and want to have the Security ...
Hello,We have a pair of Cisco ASA 5525-X and would like to migrate them to Cisco FPR-1140's.I started the migration and ended up at this screen: My intention was to set up a virtual FMC but I am not sure what version would satisfy my ASA units.Furthe...
Is it me or are nothing released regarding CVE-2025-20182https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multiprod-ikev2-dos-gPctUqv2Looked for something to patch 7.4.2 with.
After an upgrade from FTD 7.4.2.1-30 to 7.4.2.2-28 a Site to Site VPN stopped working.This is a packet trace, external 194.13.185.2 , Internal 192.168.20.23It is strange, because all phases have result "ALLOW".Except for the final punch line: Flow...
Hello to everyone.I have some doubts that arose as a result of Ethical Hacking carried out at my work, related to whether or not it is possible to stop brute force attacks on a site published from our on-premise network with FTD. Without going into t...
Hello - can FTD/FMC running snort3 collect >TLS1.2 client hello/server cert metadata collection in connection events for example? I do not want to deploy EVE and SSL decrypt is not an option. I just want to capture server cert metadata, SNI etc. Is t...
Can you tell me what FMC's /var/run/rpc.statd.pid file is doing? admin@vFMC3:/var/run$ ls -al -rw-r--r-- 1 998 997 0 Feb 7 05:36 rpc.statd.pid
Hi all,How OGS works in Cisco FTD?We were facing memory utilisation issue on FTD 3120 due to high ACE count.Cisco suggested to enable OGS.Earlier ACE count was :7905432After enabling OGS ACE count: 24905 I want to know how this OGS works and how it o...
I have an FMC 2700 on version 7.4.2.1 which is managing an FTDv running 7.2.9 and having a problem getting a site to site VPN working, it's the 5th one I've set up and the first one to this particular company (the other four have all worked fine firs...
