We have Cisco FTD 2110s that are managed with FMC and we are trying to figure out how to block access to our remote access VPN by IP. We already have a geolocation block for Access Control in FMC. But, are we still not able to do geo-ip-based restric...
Forum Posts
Resolved! SSH with X509v3 certificates
Hello,I am doing a little lab using SSHv2 with X509v3 certificate client authentication. I have a simple setup:* Windows PC with 2 SSH clients:- Putty with PuttyCAC for smartcard support- PragmaFortress SSH Client with smartcard support*C1121X-8PLTEP...
Is there a FMC API to get1) Realtime performance metrics for CPU/Memory/Disk. 2) Tunnel (VPN/Site-to-Site) performance metrics (e.g. latency, jitter, packet loss) managed on FTDs.Tried following APIs but no helpful to get intended output:/api/fmc_con...
Cisco experts,I am trying to close various ACAS scan results. Plugin 70658, SSH Server CBC Mode Cipher and I am asking what is the correct way to close this finding.The device I am working on is a Cisco Firepower 2130 with FTD. The software versio...
Our current ACAS scans are showing plugin 157288, TLS Version 1.1 Deprecated Protocol findings on Firepower 4120 and Firepower 4125 with FTD devices.The Firepower 4120 is running version 7.2.9,The Firepower 4125 is running version 7.4.2.2I am asking ...
Resolved! FPR‑4145 EOL/EOS ?
hellodo you know when is eol / eos for FPR‑4145?
Hello everyone! I'm curious if someone had similiar case? I'm wondering is it possible to configure FTD managed by FMC to do additional authentication based on destination host with Yubikey for users that are already connected with anyconnect. I'm tr...
Hello,I was going thru the list of host profiles included in FMCv v7.6 and there doesn't seem to be a lot of options for UC servers. For instance, I found an option for Unified CM but the latest version I can select is v6?? Ideally I was looking fo...
Hi.I have a problem with RA VPN DHCP configuration. VPN users get IP address from the local pool just fine, but when I try to use my Windows Server 2012 R2 DHCP server, i get the following errors and it always falls back to local pool: IPAA: Session=...
Hello,As a business we are auditing our network equipment, is the managed switch SF-300-24PP still receiving firmware updates/support.If so when till and if not when did its support end.Thank you
Dear All,I was trying to add a logical name to one of our internet faced physical interface to bring it to high availablity monitoring. But we have a sub-interface under this physical interface which is the actual internet logical interface with IP c...
I’m currently working on a POC setup with Cisco FTD managed by FMC (7.4), and I’ve configured a File and Malware policy to test file detection and logging. However, I’m encountering an issue where no file events are being logged in the File Events or...
I am getting the following Health Alerts on FMC running 7.7.0:How can I resolve these issues?
Hello, I see there is no way to "never shun" an IP address from the VPN Threat Detection feature on the newer ASA code. This needs to be added. With CGNAT being common ISP practice, we need to be able to tell the ASA to never shun a certain IP addre...
Resolved! Cisco FMC QoS filtered by application
Hi Team, I have a question about QoS on FMC version 7.4.2.2. In Devices I am able to configure speed limit etc. But what about applications? What if I want to set that, for example, communication to a public IP or Web application should have priority...
