Forum Posts
I need help from a Subject Matter Expert (SME) in regarding the Cisco Firewall Management Center (FMC). I currently have an FMC, let call it FMC-A running on VMWare ESXi in Data Center A. This FMC-A managesmultiple firewalls in Data Center B. We also...
Hi Cisco Comunity,We are using FMC 7.5.6 and FTD 7.6.4.Can FTD block file downloads from WhatsApp Web and Desktop while still allowing chat?Is there any way to block WhatsApp file downloads without enabling SSL Decryption?
Hello,We are experiencing a multicast RPF convergence issue with Cisco FTD 7.6.4 connected to a Cisco ACI fabric.Topology:Two FTD firewalls configured in Active/Standby HA (FTD A is active).Both firewalls are connected to the ACI fabric through port-...
Currently have an FTD setup and managed by an FMC with a publicly signed certificate assigned and in use for remote access users with a SAML integration. That is working without any issues. I now wanted to add a 2nd connection method for some mobil...
Hi,how can I tell which ones are ECC and which are not in case there is no clear indication in the log message?I have a couple of lines that do not mention whether the error was corrected and some differ fromt he logs given as an example in the bug d...
Good day team,We have ASA5545X with several S2S iPsec policy based.I noticed that after creating 2 ACLs on OUTSIDE and CP I am still see logs that certain IP is trying ti establish tunnel...I have blocked this IP in regular ASCL on OUTSIDE interface ...
Hello,I have a customer who needs to replace an aging ASA 5506-X HA pair, currently running ASA software, with new hardware running FTD software.My initial choice was the Cisco Secure Firewall 1010, but since it has been on the market for several yea...
Good day all,I am having a strange issue that have be baffled for the past few days. I have a S2S Policy-based VPN setup between 2 sites. One site has a FPR2110 (software: 7.4.2-172) and the other a FPR3110 (software: 7.6.6-115). I have dual ISPs on...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
I found an issue with the AES password encryption configuration from the GUI in IOS-XE 26.1.1 & 26.2.1.The AES password encryption feature was introduced in IOS-XE 26.1, but the corresponding configuration does not appear to be applied when configure...
Hello,I would like to verify the VRF (Virtual Routing and Forwarding) capabilities for the Cisco Firepower 1010 (FPR-1010) hardware.Currently, the appliance is running FTD software version 7.4.2-172.Could you please confirm:-> Is VRF fully supported ...
What are the steps to update the OS version of Asa Firepower from the existing version to the recommended one, and what is the current recommended version? If the version gap is too far from the existing one, do I have to do several steps or can I ju...
Resolved! FTD Route based VPN
HiDo i need a no Nat rule for all traffic traversing our new route based VPN I cannot seem to find the answer to this question it was mentioned to me a while ago that for route based VPNs you must use a no NAT rule for all traffic.???
Fabulous - so by following the normal process of naming sub-interfaces (from memory the documentation has guided you to use points for subifs since the dawn of time) - I now have to delve into the CLI to construct packet captures.I see the bug is mar...
