We run BGPs on FTDs managed on FMC, FMC is running 7.4.2.1-30 and FTD2140 is currently 7.2.7 but due to be upgraded to 7.4.2.1-30 in a few week's time. I wanted to monitor BGP status on Solarwinds NPM, but unlike ISR4k the option isnt' available on F...
Good day, we are having an issue where remote-vpn users connecting via the ASA are unable to access a resource. (Rough diagram attached). Whenever PC1 is accessing a given resource on the Internet, it has no issues.However whenever PC2 is accessing t...
We are running a 5516-X ASA, but not using FirePower. Is there any way i can disable FirePower? Because everytime i use ASDM i'm getting the error that it can't connect to the FirePower module.
Hi All,I have a single FMC 4600 appliance running 7.4.2 that is managing 10 FTDs running various versions between 7.2.8 and 7.4.2. We have purchased a new FMC 4600 appliance that we are planning to put into HA. The new FMC is running the correct soft...
I have one of these running to connect to CDO (or whatever Cisco names it today) and what I can't find is if it has been patched with recent security updates. I found a doc with details on doing an update, BUT, they don't work. cdo@sdc:~$ sudo su sd...
Hello everybody, our customer has a HA-cluster of two Firepower 2130 running rel. 7.2.5. The FMC is running rel. 7.4.2.1. The wildcard certificate will expire at March 8th. I got the new wildcardcertificate for the customer domain. I could enroll the...
I have setup a Route Based S2S tunnel from FTD to Palo. The tunnel is up and I am attempting to push traffic down. I have used a static route on a website to test that traffic but it is not successfully being allowed. When I run a packet capture it ...
Device Model: Cisco ASA 5585-ssp-20Software Version: 9.12(4)55ROMMON Version: 2.0(13)We have encountered a problem on Cisco ASA. After power off or reboot the device does not boot from disk0, goes to ROMMON and cannot find the software image. At the ...
I tried on the rule policy but I didn't see it
hi,i have a cisco ASA context-based mode that's currently in production.it has BGP peering with ISP and ipsec VPN in the 'admin' context.since there's no more customer context configured, plan is to convert back to single/native ASA mode with BGP and...
Now that eStreamer is at EOL, what are our options to stream events from a Firepower into Microsoft Sentinel?We are not a Splunk customer, and the page linked here says something about building your own application which isn't something that I have t...
I have a s2s tunnel setup between 2x ASA's.It works fine and I can ping fine between users A & B. (192.168.100.2 <-> 192.168.200.2)However, if I try to ping from the Inside int, to the user on the other side, so same subnet, it gets blocked.ASA A Ins...
Hi,Beware to upgrade to Windows 2025 active directory if you have integrated your firewall management center. The Kerberos timestamp format bug reported with Cisco ISE also applies to FMC 7.4.2.1. https://bst.cisco.com/quickview/bug/CSCwn62873The onl...
Hi AllI have recently deployed a Firepower appliance using cdFMC, we have moved away from our old ASA.Part of this was to allow remote access VPN, I set up a realm which was for a domain, our domain has child domains and as such on the ASA we use to ...
Hello everyone,Happy Sunday to all! I am currently working on a production environment with dual ISPs, and I'm encountering some challenges with my configuration. I hope to get some guidance from the community.Network Setup:ISP 1: Interface 1/1 with ...
