Good day team,We have ASA5545X with several S2S iPsec policy based.I noticed that after creating 2 ACLs on OUTSIDE and CP I am still see logs that certain IP is trying ti establish tunnel...I have blocked this IP in regular ASCL on OUTSIDE interface ...
Forum Posts
Resolved! FMC with Identity Policy using Azure AD
Hi All,We are currently running FMC and FTD with user identity access control polices. FMC is integrated with ISE, which in turn is integrated with our on-premises Microsoft Active Directing domain using WMI so that user to IP mappings can be passed ...
I found an issue with the AES password encryption configuration from the GUI in IOS-XE 26.1.1 & 26.2.1.The AES password encryption feature was introduced in IOS-XE 26.1, but the corresponding configuration does not appear to be applied when configure...
Fabulous - so by following the normal process of naming sub-interfaces (from memory the documentation has guided you to use points for subifs since the dawn of time) - I now have to delve into the CLI to construct packet captures.I see the bug is mar...
What are the steps to update the OS version of Asa Firepower from the existing version to the recommended one, and what is the current recommended version? If the version gap is too far from the existing one, do I have to do several steps or can I ju...
Currently have an FTD setup and managed by an FMC with a publicly signed certificate assigned and in use for remote access users with a SAML integration. That is working without any issues. I now wanted to add a 2nd connection method for some mobil...
Hi Cisco Community Experts,I am encountering a persistent deployment issue on Cisco FMC 7.6.5 when deploying policies to an FPR-2110 FTD managed via a Data Interface (Ethernet1/1, nameif: outside).Deployment fails at the snapshot generation stage wit...
We need to use data interface for manager access with Cisco FTDs in high availability. In our scenario, the FTDs in HA at remote site need to be get registered with FMC in HO. As we don't have dedicated management network, we need to use the Outside ...
Hi experts ,we have FMC managing our FTD's and version is 7.5 Recently few users had some issues connecting via the VPN while they are working from home, and i was struggling to troubleshoot the issue from FMC as haven't used FMC much in recent year...
Hi community,since we switched our FTD from Snort 2 to Snort 3, some clients can no longer open websites. Chrome and Edge show ERR_CONNECTION_RESET. The traffic of these clients is not decrypted (they match a "Do Not Decrypt" rule), but the problem p...
Dear all, I have read many cases similar to mine but I have not found the definitive answer.I have a pair of Cisco Secure Firewall 220s (release 10.0.1.0) that will form a HA pair in a branch site, these will be managed remotely by the FMC (release 1...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
i have two new FTD that should be in HA. how to onboard FTD in HA in Cisco defence orchestrator(CDO). I have two management IPs that should be provided to these FTDs. but these IPs default gateways will be in the same FTD. does it work like that? do ...
Hello everyone, We are running into on an issue on our FMC and FTDs.Both currently run the 7.6.4 version. The issue is that the FMC is showing one of the interfaces on the Active firewall as DOWN. CLI confirms the same, that the interface is currentl...
When accessing a Firepower 4225 running ASA from a Windows 11 (Enterprise) workstation, after approx 20-30 minutes the window starts to lag. It eventually becomes unusable because of how laggy it is (ultimately forcing a close through task manager be...
