Is there a FMC API to get1) Realtime performance metrics for CPU/Memory/Disk. 2) Tunnel (VPN/Site-to-Site) performance metrics (e.g. latency, jitter, packet loss) managed on FTDs.Tried following APIs but no helpful to get intended output:/api/fmc_con...
Forum Posts
In Cisco FTD firewall, Do the multiple CUSTOMER VRF on our OUTSIDE use the same AS number? with reference documents
There is requirement of disabling SIP Alg as due to some issue in voice call which get disconnected after few minutes . It has been suggested to turn off SIP Alg in our Cisco Ftd firewalls . What would be the impact on traffic and how can I disable S...
I'm looking to provide guidance on router config, this I can do, been in networking for over a decade now. However, the one area where I'm less confident on though is in Security. Specifically, in the details of ciphers, hashes, and key exchange algo...
Hello ASA 9.20 release (on FPR2100 device). I had a TAC case about TACACS+ Remote Address = 0.0.0.0 in certain Authentication Requests (when using public key auth, and also in Authorization requests) - the TAC told me to "no ssh stack ciscossh" - tha...
Resolved! FTD Reference Bandwidth
Hi all. Im trying to configure OSPF on a FTD firewall trought FMC. The idea is to tunning the Ref Bandwidth to be homologous on the nexus neighbor side. Reference bandwidth unit is 100 mbps Actually the Ref Bandwidth is by default on the FTD (7.4), i...
There are several ssl decrypt rulesRules for category - 3 do not work. And traffic is being decrypted.The main rule -6 informs that there are no categories in the rules -3. What's wrong?
Resolved! FMC with Identity Policy using Azure AD
Hi All,We are currently running FMC and FTD with user identity access control polices. FMC is integrated with ISE, which in turn is integrated with our on-premises Microsoft Active Directing domain using WMI so that user to IP mappings can be passed ...
Hello Pros.How to fix vulnerability CVE 2025-20197 thru 20201 on Cisco 4300 Router and 9200 Switches. What IOS XE version will fix the vulnerabilities for a 4300 router and a 2900 switch. Thanks in advances.
I'm trying to test a FTD in AWS. I'm using the PAYG AMI (ami-04d7dfdc0d700e259). I assumed it would include the required licensing as it a PAYG. Fortinet, PAN, F5 etc include the licensing with their PAYG AMIs.When I try to add a new IKEv2 policy usi...
We have a ASAv in Azure that is only used for AnyConnect. We have a Site-to-Site between Azure and a Watchguard FW at our Colo. The tunnel is up but I can't get to anything in the Colo while connected to the Secure Client. I can get from Azure to the...
Hello, I can not find an answer to this anywhere online. It would seem self-explanatory, but apparently it's not. What encompasses the "Snort - Denied Flows" that can be seen for the FTD in FMC's Health Monitor? The numbers I am seeing in the "Snort ...
cisco secure firewall migration tool offline mode: I have a network that is not connected to the internet. I am working to upgrade a cisco ASA 9.20 to FTD. How do I enable offline mode?
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
Hi,Is possible to use the Security Intelligence Network Lists and Feeds (custom feed) on ASA 9.14? (no firepower)The requirement is to block a list of Ip taken from internal threat intelligence managed outside the ASA.Thanks.
