We are planning to upgrade Firepower2120（platform mode, standalone）from version 9.16.2.14 to 9.18.4.40,and I have a question about the internal process during installing packages metioned in this upgrade guide below. Cisco Secure Firewall ASA Upgrade...
Forum Posts
Dear All, We keep having issues with this, anyway we can solve it? or is a hardware issue?Trying to shutdown Service Module SM1/0LLSGCCM001#*Sep 18 00:36:30.910: %SRE_SM-6-STATE_CHANGE: SM1/0 changing state from SERVICE_MODULE_STATE_WREG to SERVICE_M...
Hello Guy,Currently, I have issue with restore ftd file from FMC via scp with error message below. is there anyone guy ever meet this issue. any guys can help me on this. > restore remote-manager-backup location 10.x.x.x admin /var/sf/remote-backup F...
Want to clear old faults from list presented on Overview screen in the GUI of a FPR-C9300?What are the commands from the command line? Thanks in advance.
Resolved! FPR-2100 Default gateway for mgmt on ASA
If Mgmt1/1 interface is on another subnet, how can I put a different gw for that?(or something like a vrf)or it uses the default gw that I already setup on FX-OS?!lolbut what about 5555x that doesn't have FX-OS? Thanks,
Hi have exported a CA cert from my ASA and added to objects > PKI > cert enrollment. When added I then went to devices >certs and generated the CSR to be signed but the cert issued against the CSR has only hostname ‘firepower’ rather than FW-HOSTNAME...
It seems that ASA failover works fine without the standby address. What is the advantage of wasting an IP address?Regards,AM
I am running a couple of Cisco FTD 2110 managed with FMC and am looking for the best way to block access to our remote access VPN by IP. From doing some reading it looks like the best (and only?) way to do this is via a control plane ACL deployed via...
I have 2 instances of firepower threat defense running on 4100 hardware device and managed by FMC. I have been trying to recover password of one instance of the ftd using this guide https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/...
Hello, In ASA failover all interfaces whether they are monitored or not (using no monitor-interface) will switch their ip addresses when failover occurs or via 'failover active "command. my question is : Is there any possible way by which we can f...
I have extended support for below EOS devices. I have a power activity in some time, so need to make sure that all PSUs are working fine for me. Like :- "FXOS prompt – 4110 & 4120 – FPR/chassis # show environment expand detail" what are the equiva...
Resolved! Diffie-Hellman groups for FTD 7.6.X
Hi, What are the DH Groups supported for FTD 7.6.X?
Can you upload/restore a backup config of an old FTD that was saved via FMC to a new FTD via FDM/locally? Not sure if they are unique device specific? Basically want to restore configs of an old/bad FTD (to configure exactly the same) locally and/or ...
I know a couple years back, and couple OS revisions back, there was a significant change to how one could access via SNMP the ASA's inside interface through a L2L tunnel. I have encountered now 2x FPR1010 (ASAs) with v9.18(2) that through the VPN I c...
I am using session sfr command to open the firepower CLI, but don't see an option for restarting the CLI wizard. I have an ASA 5506-X with firepower and want to get into initial configuration wizard within Firepower module's command line. I already ...
