Hi all, Have a problem with NAT-T. I have FTD 2130 device managed by FMC which is terminating all my VPN connections. FTD does not have PUBLIC IP attached to internet, instead I have internet router that is doing 1-to-1 static NAT without any port fo...
Hi Guys,We have a FTD terminating a few IPSec tunnels. One of them are having connectivity issues with larger packets so we suspect that there is a smaller MTU set somewhere towards the destination. As far as I know the FTD can overwrite the endpoint...
I have several l2l tunnels we are moving and decommissioning. I see a few tunnels with very little traffic, but traffic nonetheless based on RX and TX counts, and I need to see who exactly and what servers are still using the tunnel, and which ports....
We have successfully tested SSO with MFA logon to the FMC. However, when we attempt to logout, we receive the following message You are logged in using SSO provided by Azure. To protect your Firewall Management Center account from unauthorized access...
Can I configure the FTD interface using the LINA (diagnostic-cli ) in exec mode or Enable and Disable the interface ?I'm trying to move my outside interface from eth1/1 to eth1/13(10GB)
Hi I want to know how many 1:1 nat sessions Firepowers can have. is it unlimited? For an example, 1 public ip can have 65536 PAT session. If I have 2 public ips, PAT session can be 130,000 sessions? I can't find any information about the nat table ...
Hello, i need to export the entire configuration of 2 ftd 2130 managed by FMC, how can i do that?Is there any possibility to achieve it via CLI?I would like to have a .txt. file, i didn't find anything on official documentation. Thank you Regards
We have an old ASA that we're trying to change the password on to allow us to delete the config. I follow steps to get into ROMMOM mode (using this conversation), change the config register, to allow me to boot to change the password, but when I boot...
Hello,we have a Cisco ASA witch ASDM but seems to be a certificate issue. The certificate is using SHA256, is self signed but Java is saying that there is an issue with SHA1 since the error is saying "denyAfter constraint check failed: SHA1 used with...
Now that FMC is available for Hyper-V, I got ours running successfully, but it seems I need a license for it since it says it's not in compliance. Anyone have the SKU or name of what it should be?
We're currently using vFMC (KVM) and a couple of FTD1010 and FTD2110 (some FMC managed and some are locally managed - FDM). For now I had luck only with one, to be able to update successfully from one to another version. Other FTDs 1010 have a consta...
I am seeing what appears to be a botnet (mainly Brazil IPs) trying to brute force connect to my ASA on port 443. Hundreds of thousands of attempts per day, but slow enough not to trip threat detection. Ive created a acl group to block control plane ...
We have a FTD managed by FMC. For some reason it's nos possible to ping the address 8.8.8.8 and 1.1.1.1 for example. But if we ping the address 8.8.4.4, it responds to the ping. We have a default static route to the internet provider, but when enteri...
Good day!After upgrading FTDv100 on VmWare from 7.3.2.1 to 7.4.2, got the following issues: Now upgraded to FTDv100 on VMWare to 7.4.2, got the following issues: Unlike in 7.3.2, which suddenly stopped all the traffic on interfaces, now on 7.4.2: - f...
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 2 | |
| 1 |
