HiI have been testing in my lab but having no joy at all, do i have to use network statements in FTD BGP in order to advert prefixesI can not get it working using just prefix-list/route-maps.????
Forum Posts
Can i integrate firepower with fortisandbox ? if it is capable thank you to mention the method.
Hi can someone help me with these logs analysis2026-06-23T02:18:08Z LN03EXTFW01 : %FTD-6-302015: Built outbound UDP connection 5187085 for nlp_int_tap:169.254.1.3/123 (169.254.1.3/123) to identity:169.254.1.1/65535 (169.254.1.1/65535) 2026-06-23T02:1...
I do not have a sandbox environment to test, so I have to ask here. Existing environment: A single Cisco Firepower FP-4110 running FTD 7.2.11with four interfaces, and a management interface: FTD management interface that communicates with FMC: IP add...
Hello All,In my current work environment we use GRE tunnels with a IPSEC backbone. we have many branch offices and we use X509 certs to authenticate across the board. Our HQ has established tunnels with all other nodes and we have connection the the ...
Dear Community,I read in a post online recently that in some instances pushing policy to your FTD's from the FMC may cause the Snort process to restart, potentially causing traffic disruption. I was wondering if the following actions may cause traffi...
Has anyone reading this ever needed to set multiple communities for a BGP route on FTD or ASA?IOS-XE allows the setting of multiple communities in a route maps with the list being separated by spaces:route-map SET-COMMUNITY permit 10 match ip pref...
Hello,I am currently trying to setup syslog events for CLI logins either via ssh or console, we would like to see all successful and failed attempts.I made an event for 605004-5 & 611101-4 ID's but it looks like that just tells all logins to the FMC ...
Resolved! How to show age of an ASA
Hello, I know that it's possible to know the age of a switch with its serial number But how to know the age of a CISCO ASA? The serial number of an ASA does not have the same form.
Firewall Management Center Version 7.6.5 (build 106) OS Cisco Firepower Extensible Operating System (FX-OS) 2.16.1 (build 147)I have noticed today very slow web interface ... Health Monitorgrapthics are cutted, or "no data available"Then i caught a ...
I'm looking at connecting an ASA cluster to a CheckPoint firewall cluster and told it will work.I've configured one interface on the ASA (inside) and cabled it up to go direct to an interface on the CheckPoint firewall (both have an IP in the same su...
Hi All,I was planning update my cisco FTD IPS(snort 3 LSP ) signature to latest via FMCv. During the signature update process, is there any impact on the ongoing production traffic as well as the established site to site VPN tunnels. Looking forward ...
I am experiencing an issue with the software image on a Cisco Firepower 1010 device. After performing a factory reset, I accidentally erased disk0:, which resulted in the loss of the system image. As a result, the device can no longer boot and is cur...
Hi all,In FMC, both IPS and Security Intelligence (SI) can be deployed in a detection/monitor-only mode for tuning and false-positive validation before enabling blocking.In FDM, I can only find a Detection mode option for IPS. SI appears to be block-...
Hello Cisco Community, Is it possible to run SOAR from Qradar to block IP on FTD. Also is it possible to import the feed (List of IP that we wants to block) for IP blocking?So currently our FTD is Registered on FMC, and we made rules on Access Contro...
