Outbound traffic from a PC to the server is allowed by the firewall without any issues,but return traffic from the server is subject to source NAT along the way, preventing communication.If outbound traffic bypasses NAT but return traffic is NATed, t...
Forum Posts
Hi experts ,we have FMC managing our FTD's and version is 7.5 Recently few users had some issues connecting via the VPN while they are working from home, and i was struggling to troubleshoot the issue from FMC as haven't used FMC much in recent year...
When this bug was originally posted in June, it was saying to wait for next release. And now it is saying, "This is a hardware specific issue and hence there is no software version fix for this".So, I just want to clarify if the bug has always existe...
Hi, we have a Cisco Secure Firewall that has an RAVPN setupThe authentication uses LDAP which has an LDAPAttribute where users must be in a VPN security group in AD. This is confirmed working. However, AD Accounts are getting disabled and we think it...
Hi everyone,I have recently set up a remote syslog server and configured syslog logging for Cisco FTD (v7.6.4) via FMC.The logs are being sent and received as expected. Here is an example of an IPS event log from the syslog server:<41>Sep 2 08:48:28 ...
i have two new FTD that should be in HA. how to onboard FTD in HA in Cisco defence orchestrator(CDO). I have two management IPs that should be provided to these FTDs. but these IPs default gateways will be in the same FTD. does it work like that? do ...
My Cisco FTD keep sending me a critical alert every 5 minutes saying that a few of our FTD interface lack of input data:Severity: criticalModule: Interface StatusDescription: 2 subinterfaces of 'Port-channel20' are not receiving any packetsThere are ...
Hi everyone,I'm experiencing a UI/UX issue with the Cisco Secure Firewall Management Center (FMC). Version: 10.0.0 (build 141) Model: FMC for VMwareWhen viewing or editing the Access Control List (ACL) rules, the modal window/container is extremely s...
Hello,I am trying to monitor the Interface state of a FTD-1120 in the FMC.We do have interfaces with almost no traffic and so we excluded the "not receiving any packets" messages successfully. But we do not get any Health alerts when the interface is...
Hi All,I'm currently in the middle of setting up a new FTD 4225 which is equipped with two management interfaces. According to the data sheet, the management interfaces can be configured to be resilienthttps://www.cisco.com/c/en/us/products/collatera...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
Hello everyone,I’m working with a Cisco Secure Firewall 1210CE Threat Defense running software version 7.6.4-69, protecting a small LAN.To improve security, I segmented the network into two VLANs:VLAN1 – 192.168.0.0/24: Oracle Database Server 19c on ...
Resolved! FMC: Automatic renew certificates?
Hello,Managing certificates is getting more and more a nightmare as the valid lifetime will be reduced to 47 days, especially on devices and virtual appliances that don't support any kind of automatic renewal protocol.What are the options in FMC to a...
Resolved! Allowing FTP Active Mode
On firewalls such as the Cisco ASA, is it sufficient to allow only port 21/tcp in order to permit FTP Active Mode data transfer?Client → Server (21/tcp)Server (20/tcp) → ClientIf I allow port 21/tcp, will the system track the data connection and auto...
Hi all,I'm a student doing home-lab practice with an ASA 5500-X / FirePOWER setup. Cisco has since removed these files from the download portal, so I can't verify them against the official checksum anymore.Could someone who downloaded these directly ...
