Is it best practice to create one security zone per interface, or should interfaces with some common traits in terms of the services behind them be grouped into the same zone?For example, if I have 10 interfaces, would you typically create 10 zones o...
Forum Posts
Hello, In case someone will run into the same issue. You may not be able to use Secure Client (anyconnect) with Firepower 1010 platformI was trying to use Secure Client on Firepower 1010, uploading packages for Windows, Linux and Mac. Upon deployme...
Resolved! FPR1010-ASA randomly crashing.
a bunch of our FPR 1010 running ASA 9.22(2)32 keep crushing randomly and then the console is flooded with non stop logs and everything stops working. I was wondering if any of you out there with the same setup have experianced something similar.here ...
Hi All,I needed some urgent help, i have a FTD and have created block policy to block www.youtube.com but i am unable to setup a custom block page and research done so far is that need to install SSL certificate in end device but issue is that its a ...
Hello!FMC version 7.6.5I have trouble with downloading upgrade packages via FMC UI in "Product Upgrades".After clicking the circle to retrieve available updates, it says "Contacting server" in the bottom left and after a minute or so (sometimes faste...
Hi All,I am trying to block facebook website using FTD/FMC but after adding rule i am still able to access facebook and other social networking websites.Its seems to be some issue with SSL certificate and unfornately i have MYOD devices and not able ...
I have a couple Firepower firewalls that run ASA image. Should I change the image to FTD? In that case should I use FMC or managing the FTD via FDM would be enough?As far as I know FMC provides more features that configuring an FTD via FDM, isn't it?...
Hi,Our DigiCert Identity Certificate for Remote Access VPN (xx.example.com) is expiring soon. We need to renew it and submit a new CSR to DigiCert for signing.Can someone confirm where in the FMC GUI the CSR should be generated for the RA VPN/FTD ide...
Resolved! Generate CSR on FMC for FTD
On the ASA, I could generate a keypair and CSR to then be submitted and signed by a CA etc.. For the FTD devices, can this be done from the FMC or do we need to use OPEN SSL? All I am looking to do is generate a keypair / CSR and get it signed et...
HiQuick question, Is it possible to Configure a RB VPN on an FTD using a Loopback Interface.??I ask because I have been requested to set up one but the thing is the peer IP I have to use my side is not one of the FTD Interface IP Addresses, Also is t...
Resolved! FTD 3105 lost on-box management
Good morning everyone,My company recently purchased 2 3105 FTD's, which I currently have staged ready to begin configuration. Yesterday I spun up a vFMC in our vmware cloud and attempted to transfer mgmt of FT-DFW01 to the vFMC. FMC & the FTD were on...
Dear Team, Does anyone know how to enable MS-CHAPv2 authentication (instead of PAP) for the Identity Source in the FDM ? Recently we have upgraded our ASA-5508X to FTD and everything works like a charm except one thing - our NPS/Radius server was con...
Firewall Migration Manager (FMM) by Cisco is now generally available, a purpose-built, enterprise-grade platform designed to automate, govern, and accelerate the migration of Cisco ASA configurations to Cisco Secure Firewall Threat Defense (FTD). Ava...
Resolved! Migrating from an old ASA to a new one
What is needed to migrate from an old ASA to a new one? Is only copying the config to the new one? How about the SSL certificate, how can I move it to the new platform?
Resolved! Issues With Cisco Security Cloud app
The documentation of the Cisco Security Cloud Splunk app and the issues I am facing with this app is quite shocking. Firstly, no documentation on how to migrate from deprecated Splunk Estreamer addon to this new "app"After I installed the app, I keep...
