I currently have a few Production FTDv deployed in Azure and looking to resize them. I do see the option where I can resize when the FTD is off. My question is can I resize the existing FTD or do I have to build new virtual FTDs with the new size? I ...
Forum Posts
I am running Firepower 1010 appliance with FTD 7.4.2. I encountered a strange issue where the DHCP server on it is not pushing the updated DNS that I set. I setup a new DNS server so it has a different IP. In the FIrepower 1010 device management, ...
I have a setup that I need help connecting.I got a cisco router and cisco FTD firewallI’m having trouble connecting them.the router needs to talk to the FW. It has a static route to the interface of the firewallthe firewall has a single “Allow All” r...
Resolved! FMC Platform Settings
HiJust wondered if any new that if I added DNS servers to the DNS group in platform settings that this is disruptive, I;m only adding additional Servers.?? Also is adding NTP Servers on FMC disruptive at all.? Thanks
Hi,I have an FTD 1120 managed by FMC,topology; I have 4 internet feeds going into the firewall (migrating down to 2) with multiple VRF'sProblem: i created a new VRF and added a leaked route to one of the internet feeds however I get the below error, ...
Hey there we are trying to migrate the ASA to FTD FMCwe Have production FMC-xx.xx.xx.245 with sfr so we created test FMC-xx.xx.xx.145 and we have atual new FTD which registered with Test FMC-145we successfully push asa config into Test FMC and we con...
Resolved! ASA Overlapping subnet
Hi I have a WebVPN setup on my ASA (Software Version 9.12(1)2. I am having issues setting up email alerts on a Kiwi Syslog server that is logging from the ASA. Logging is working correctly since I can log on to the Kiwi Syslog server and see the AS...
Hi, I have an RAVPN solution deployed at two different sites. They each are supposed to use different address pools but when I change one pool it changes the other.. how do I get around this?Site 1The address pool for site one should be 192.168....Si...
Hello Cisco Community,I want to ask, when tried to show object-group, i found ACL Count in Minus, what does it mean? We didn't any ACL for this object-group (the minus one). Is this a bug or not?
Dear all,In our lab we have some EOL Products (some of the are realy old). I would like to check the latest -interim software für these devices. Cisco ASA 5505 (we have: asa904-42-k8, 917-32-k8, 924-k8...)Cisco ASA 5512X IPS, 5515X (we have: asa9-12...
Resolved! does TCP_Bypass support fmc 7.4.2
Hi there we are trying to configure tcp bypass in flex config following cisco documets:https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/211628-FTD-How-to-enable-TCP-State-Bypass-Conf.htmlhowever we got an error as "Unsupported cli -...
Hi All.I have a Cisco ASA 5510 running Version 8.3(2) on which I've been having a problem getting a DMZ server to commiunicate back into the Internal network. While trying different ACL's and NAT's to get this to work I've come across something stran...
Does the FMC virtual on premises support High Availability design synchronizing the policy configuration between them ? If so is there any bundled license or do I have to double SKU´s in CCW ?
Hi All, We have upgraded Asa 5516-x to latest and final version 9.16.4 which got successfully. But post that we are getting the warning for Platform FPGA/ROMMON version is older than minimum recommended image as currently ROMMON version is 1.1.8. No...
Here is the original ASA rule - interfaces have been renamed nat (IG_PCH_INT_INSIDE_CHESS,IG_PCH_INT_OUTSIDE_CHESS) source dynamic ObjectGroup1 pat-pool obj-group-pat-pool flat include-reserve round-robin destination static EXTNHSMAIL EXTNHSMAIL Her...
