Hello,I have a customer who needs to replace an aging ASA 5506-X HA pair, currently running ASA software, with new hardware running FTD software.My initial choice was the Cisco Secure Firewall 1010, but since it has been on the market for several yea...
Forum Posts
Hello,We are experiencing a multicast RPF convergence issue with Cisco FTD 7.6.4 connected to a Cisco ACI fabric.Topology:Two FTD firewalls configured in Active/Standby HA (FTD A is active).Both firewalls are connected to the ACI fabric through port-...
Good day all,I am having a strange issue that have be baffled for the past few days. I have a S2S Policy-based VPN setup between 2 sites. One site has a FPR2110 (software: 7.4.2-172) and the other a FPR3110 (software: 7.6.6-115). I have dual ISPs on...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
I found an issue with the AES password encryption configuration from the GUI in IOS-XE 26.1.1 & 26.2.1.The AES password encryption feature was introduced in IOS-XE 26.1, but the corresponding configuration does not appear to be applied when configure...
Hello,I would like to verify the VRF (Virtual Routing and Forwarding) capabilities for the Cisco Firepower 1010 (FPR-1010) hardware.Currently, the appliance is running FTD software version 7.4.2-172.Could you please confirm:-> Is VRF fully supported ...
What are the steps to update the OS version of Asa Firepower from the existing version to the recommended one, and what is the current recommended version? If the version gap is too far from the existing one, do I have to do several steps or can I ju...
Resolved! FTD Route based VPN
HiDo i need a no Nat rule for all traffic traversing our new route based VPN I cannot seem to find the answer to this question it was mentioned to me a while ago that for route based VPNs you must use a no NAT rule for all traffic.???
Fabulous - so by following the normal process of naming sub-interfaces (from memory the documentation has guided you to use points for subifs since the dawn of time) - I now have to delve into the CLI to construct packet captures.I see the bug is mar...
Hi Gents,Anyone here tried fixing this error on FMC HA? "Degraded- Synchronization incomplete (This Management Center has fewer devices registered)" and also the registration status to the FTD on the secondary(standby) FMC is still on "Pending Regist...
Good day team,We have ASA5545X with several S2S iPsec policy based.I noticed that after creating 2 ACLs on OUTSIDE and CP I am still see logs that certain IP is trying ti establish tunnel...I have blocked this IP in regular ASCL on OUTSIDE interface ...
Resolved! FMC with Identity Policy using Azure AD
Hi All,We are currently running FMC and FTD with user identity access control polices. FMC is integrated with ISE, which in turn is integrated with our on-premises Microsoft Active Directing domain using WMI so that user to IP mappings can be passed ...
Currently have an FTD setup and managed by an FMC with a publicly signed certificate assigned and in use for remote access users with a SAML integration. That is working without any issues. I now wanted to add a 2nd connection method for some mobil...
Hi Cisco Community Experts,I am encountering a persistent deployment issue on Cisco FMC 7.6.5 when deploying policies to an FPR-2110 FTD managed via a Data Interface (Ethernet1/1, nameif: outside).Deployment fails at the snapshot generation stage wit...
We need to use data interface for manager access with Cisco FTDs in high availability. In our scenario, the FTDs in HA at remote site need to be get registered with FMC in HO. As we don't have dedicated management network, we need to use the Outside ...
