i have two new FTD that should be in HA. how to onboard FTD in HA in Cisco defence orchestrator(CDO). I have two management IPs that should be provided to these FTDs. but these IPs default gateways will be in the same FTD. does it work like that? do ...
Forum Posts
Hi Cisco Community Experts,I am encountering a persistent deployment issue on Cisco FMC 7.6.5 when deploying policies to an FPR-2110 FTD managed via a Data Interface (Ethernet1/1, nameif: outside).Deployment fails at the snapshot generation stage wit...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
Hi experts ,we have FMC managing our FTD's and version is 7.5 Recently few users had some issues connecting via the VPN while they are working from home, and i was struggling to troubleshoot the issue from FMC as haven't used FMC much in recent year...
Hello everyone, We are running into on an issue on our FMC and FTDs.Both currently run the 7.6.4 version. The issue is that the FMC is showing one of the interfaces on the Active firewall as DOWN. CLI confirms the same, that the interface is currentl...
When accessing a Firepower 4225 running ASA from a Windows 11 (Enterprise) workstation, after approx 20-30 minutes the window starts to lag. It eventually becomes unusable because of how laggy it is (ultimately forcing a close through task manager be...
Resolved! RAVPN hardening on Cisco Secure firewall
Hi, we have a Cisco Secure Firewall that has an RAVPN setupThe authentication uses LDAP which has an LDAPAttribute where users must be in a VPN security group in AD. This is confirmed working. However, AD Accounts are getting disabled and we think it...
Hi everyone,I’m working with small local service businesses that use WordPress websites, and I’m trying to better understand what a sensible security setup looks like when the business doesn’t have a dedicated IT or security team.A typical site might...
Resolved! Issues With Cisco Security Cloud app
The documentation of the Cisco Security Cloud Splunk app and the issues I am facing with this app is quite shocking. Firstly, no documentation on how to migrate from deprecated Splunk Estreamer addon to this new "app"After I installed the app, I keep...
Resolved! ASA: Logging for Session Mismatches
Outbound traffic from a PC to the server is allowed by the firewall without any issues,but return traffic from the server is subject to source NAT along the way, preventing communication.If outbound traffic bypasses NAT but return traffic is NATed, t...
When this bug was originally posted in June, it was saying to wait for next release. And now it is saying, "This is a hardware specific issue and hence there is no software version fix for this".So, I just want to clarify if the bug has always existe...
Hi everyone,I have recently set up a remote syslog server and configured syslog logging for Cisco FTD (v7.6.4) via FMC.The logs are being sent and received as expected. Here is an example of an IPS event log from the syslog server:<41>Sep 2 08:48:28 ...
My Cisco FTD keep sending me a critical alert every 5 minutes saying that a few of our FTD interface lack of input data:Severity: criticalModule: Interface StatusDescription: 2 subinterfaces of 'Port-channel20' are not receiving any packetsThere are ...
Hi everyone,I'm experiencing a UI/UX issue with the Cisco Secure Firewall Management Center (FMC). Version: 10.0.0 (build 141) Model: FMC for VMwareWhen viewing or editing the Access Control List (ACL) rules, the modal window/container is extremely s...
Hello,I am trying to monitor the Interface state of a FTD-1120 in the FMC.We do have interfaces with almost no traffic and so we excluded the "not receiving any packets" messages successfully. But we do not get any Health alerts when the interface is...
