Hi community,since we switched our FTD from Snort 2 to Snort 3, some clients can no longer open websites. Chrome and Edge show ERR_CONNECTION_RESET. The traffic of these clients is not decrypted (they match a "Do Not Decrypt" rule), but the problem p...
Forum Posts
Dear all, I have read many cases similar to mine but I have not found the definitive answer.I have a pair of Cisco Secure Firewall 220s (release 10.0.1.0) that will form a HA pair in a branch site, these will be managed remotely by the FMC (release 1...
Hi Cisco Community Experts,I am encountering a persistent deployment issue on Cisco FMC 7.6.5 when deploying policies to an FPR-2110 FTD managed via a Data Interface (Ethernet1/1, nameif: outside).Deployment fails at the snapshot generation stage wit...
Hi experts ,we have FMC managing our FTD's and version is 7.5 Recently few users had some issues connecting via the VPN while they are working from home, and i was struggling to troubleshoot the issue from FMC as haven't used FMC much in recent year...
We need to use data interface for manager access with Cisco FTDs in high availability. In our scenario, the FTDs in HA at remote site need to be get registered with FMC in HO. As we don't have dedicated management network, we need to use the Outside ...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
i have two new FTD that should be in HA. how to onboard FTD in HA in Cisco defence orchestrator(CDO). I have two management IPs that should be provided to these FTDs. but these IPs default gateways will be in the same FTD. does it work like that? do ...
Hello everyone, We are running into on an issue on our FMC and FTDs.Both currently run the 7.6.4 version. The issue is that the FMC is showing one of the interfaces on the Active firewall as DOWN. CLI confirms the same, that the interface is currentl...
When accessing a Firepower 4225 running ASA from a Windows 11 (Enterprise) workstation, after approx 20-30 minutes the window starts to lag. It eventually becomes unusable because of how laggy it is (ultimately forcing a close through task manager be...
Resolved! RAVPN hardening on Cisco Secure firewall
Hi, we have a Cisco Secure Firewall that has an RAVPN setupThe authentication uses LDAP which has an LDAPAttribute where users must be in a VPN security group in AD. This is confirmed working. However, AD Accounts are getting disabled and we think it...
Hi everyone,I’m working with small local service businesses that use WordPress websites, and I’m trying to better understand what a sensible security setup looks like when the business doesn’t have a dedicated IT or security team.A typical site might...
Resolved! Issues With Cisco Security Cloud app
The documentation of the Cisco Security Cloud Splunk app and the issues I am facing with this app is quite shocking. Firstly, no documentation on how to migrate from deprecated Splunk Estreamer addon to this new "app"After I installed the app, I keep...
Resolved! ASA: Logging for Session Mismatches
Outbound traffic from a PC to the server is allowed by the firewall without any issues,but return traffic from the server is subject to source NAT along the way, preventing communication.If outbound traffic bypasses NAT but return traffic is NATed, t...
When this bug was originally posted in June, it was saying to wait for next release. And now it is saying, "This is a hardware specific issue and hence there is no software version fix for this".So, I just want to clarify if the bug has always existe...
Hi everyone,I have recently set up a remote syslog server and configured syslog logging for Cisco FTD (v7.6.4) via FMC.The logs are being sent and received as expected. Here is an example of an IPS event log from the syslog server:<41>Sep 2 08:48:28 ...
