I found an issue with the AES password encryption configuration from the GUI in IOS-XE 26.1.1 & 26.2.1.The AES password encryption feature was introduced in IOS-XE 26.1, but the corresponding configuration does not appear to be applied when configure...
HiDo i need a no Nat rule for all traffic traversing our new route based VPN I cannot seem to find the answer to this question it was mentioned to me a while ago that for route based VPNs you must use a no NAT rule for all traffic.???
Hello,I would like to verify the VRF (Virtual Routing and Forwarding) capabilities for the Cisco Firepower 1010 (FPR-1010) hardware.Currently, the appliance is running FTD software version 7.4.2-172.Could you please confirm:-> Is VRF fully supported ...
Fabulous - so by following the normal process of naming sub-interfaces (from memory the documentation has guided you to use points for subifs since the dawn of time) - I now have to delve into the CLI to construct packet captures.I see the bug is mar...
Hi Gents,Anyone here tried fixing this error on FMC HA? "Degraded- Synchronization incomplete (This Management Center has fewer devices registered)" and also the registration status to the FTD on the secondary(standby) FMC is still on "Pending Regist...
Good day team,We have ASA5545X with several S2S iPsec policy based.I noticed that after creating 2 ACLs on OUTSIDE and CP I am still see logs that certain IP is trying ti establish tunnel...I have blocked this IP in regular ASCL on OUTSIDE interface ...
Hi All,We are currently running FMC and FTD with user identity access control polices. FMC is integrated with ISE, which in turn is integrated with our on-premises Microsoft Active Directing domain using WMI so that user to IP mappings can be passed ...
What are the steps to update the OS version of Asa Firepower from the existing version to the recommended one, and what is the current recommended version? If the version gap is too far from the existing one, do I have to do several steps or can I ju...
Currently have an FTD setup and managed by an FMC with a publicly signed certificate assigned and in use for remote access users with a SAML integration. That is working without any issues. I now wanted to add a 2nd connection method for some mobil...
Hi Cisco Community Experts,I am encountering a persistent deployment issue on Cisco FMC 7.6.5 when deploying policies to an FPR-2110 FTD managed via a Data Interface (Ethernet1/1, nameif: outside).Deployment fails at the snapshot generation stage wit...
We need to use data interface for manager access with Cisco FTDs in high availability. In our scenario, the FTDs in HA at remote site need to be get registered with FMC in HO. As we don't have dedicated management network, we need to use the Outside ...
Hi experts ,we have FMC managing our FTD's and version is 7.5 Recently few users had some issues connecting via the VPN while they are working from home, and i was struggling to troubleshoot the issue from FMC as haven't used FMC much in recent year...
Hi community,since we switched our FTD from Snort 2 to Snort 3, some clients can no longer open websites. Chrome and Edge show ERR_CONNECTION_RESET. The traffic of these clients is not decrypted (they match a "Do Not Decrypt" rule), but the problem p...
Dear all, I have read many cases similar to mine but I have not found the definitive answer.I have a pair of Cisco Secure Firewall 220s (release 10.0.1.0) that will form a HA pair in a branch site, these will be managed remotely by the FMC (release 1...
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
