hi,i encountered a strange issue with my ASA primary FW. i can't login via TACACS+ on the primary but i can login fine to the secondary ASA. ping to ISE/TACACS+ server from both primary and secondary ASA are fine. i'm only able to login to primary AS...
Forum Posts
Hello everybody, I have been tasked to install the BIOS Update HotFix FC 7.4.99.99-1 on a FMC 1600 running rel. 7.4.2.1.I have never done this before and did not find a step-by-step guide. My questions:1. Is there a guide for this task?2. Is it neces...
Hi Team, We have an FTD which have an inside interface connect to our LAN switch, this interface is segregated through subinterfaces for DATA and AUDIOCODE vlan and both come under same security zone as seen below.We have both policy and nat rule for...
Hi everyone, Our Firepower 1120 device shows a blinking amber light on the power LED when powered on, while all other LEDs remain off. In addition, we are unable to access the console screen. We have attached a video showing the current behavior of t...
Dear Team, I unable to ssh the FTD device. No External authentication is configured. Local authentication enable. When ssh the device user name & password asking. After giving proper credentials access denied. But on same credentials we able to login...
Resolved! Connect FMC to ISE with Radius over DLTS
We are currently using FMC and ISE to manage admins who can log into FMC and the firewalls in our environment. We were considering how we can better secure our management connections, specifically the communications between our firewalls and ISE. Cur...
I Have firepower2100 with smart licence activated. I would like use VPN remote access, my problem is Export-Controlled Features is disabled. I opened case in cisco team, they recommded me to use 3DES-AES license .. I have Two question : 1-i just hav...
Hello All,Would like to know if there is a way to configure HA between 2 Cisco 1010 FTD using Device Manager? I was trying but the HA Configure button is greyed out due to error stating I need all interfaces to have a static IP address. I am looking ...
Hello Cisco Community!We have a situation where we need to disable SQLNET Inspection in the FMC Cisco Firepower 2110 Threat Defense.I would appreciate your guidance on how to do this using the GUI and the command line.I found the information about...
I’m designing a multi-branch network using Cisco Secure Firewall 1220CX appliances at each branch, connected to Catalyst 1300 switches for local access. Meraki APs connect to the switches.The goal is to achieve centralized, cloud-based management fo...
please suggest appropriate board to post my question if this is not the correct boardWe have a cisco 4110 that we need to upgrade to Ciso4215 .. and I need to figure out how to proceed. Our plan is to move to Cisco Security Cloud regardless of the ap...
Resolved! DoS To FTD
Hello,FTD 2110s 7.4.2.4I'm looking for suggestions on two topics. 1. What's the best way to help prevent Dos attacks to the FTD itself. Is flex config the only way and does anyone have a proven config. for that they could share?2. What upstream servi...
Hi AllI will be adding another FTD into our CDO platform, however the licence for the new unit sits in a different virtual smart account than the current one.Do I just click on claim subscription ? how would I link the licence in this other smart acc...
Hello everyone,we are using the Cisco ASDM-IDM Launcher v1.9(9). When the Launcher connects to a system with a self-signed SSL certificate, we do not receive any warning messages. Additionally, I cannot view or verify the SSL state in the Cisco ASDM-...
Hi,When looking at a host profile discovered by the network discovery policy in FMC I see there is a "Servers" section with the list of protocols and ports listed according to the connection events registered for this host as a destination. Down bel...
