i have two new FTD that should be in HA. how to onboard FTD in HA in Cisco defence orchestrator(CDO). I have two management IPs that should be provided to these FTDs. but these IPs default gateways will be in the same FTD. does it work like that? do ...
Forum Posts
Resolved! RAVPN hardening on Cisco Secure firewall
Hi, we have a Cisco Secure Firewall that has an RAVPN setupThe authentication uses LDAP which has an LDAPAttribute where users must be in a VPN security group in AD. This is confirmed working. However, AD Accounts are getting disabled and we think it...
Hi everyone,I’m working with small local service businesses that use WordPress websites, and I’m trying to better understand what a sensible security setup looks like when the business doesn’t have a dedicated IT or security team.A typical site might...
Hi experts ,we have FMC managing our FTD's and version is 7.5 Recently few users had some issues connecting via the VPN while they are working from home, and i was struggling to troubleshoot the issue from FMC as haven't used FMC much in recent year...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
Resolved! Issues With Cisco Security Cloud app
The documentation of the Cisco Security Cloud Splunk app and the issues I am facing with this app is quite shocking. Firstly, no documentation on how to migrate from deprecated Splunk Estreamer addon to this new "app"After I installed the app, I keep...
Resolved! ASA: Logging for Session Mismatches
Outbound traffic from a PC to the server is allowed by the firewall without any issues,but return traffic from the server is subject to source NAT along the way, preventing communication.If outbound traffic bypasses NAT but return traffic is NATed, t...
When this bug was originally posted in June, it was saying to wait for next release. And now it is saying, "This is a hardware specific issue and hence there is no software version fix for this".So, I just want to clarify if the bug has always existe...
Hi everyone,I have recently set up a remote syslog server and configured syslog logging for Cisco FTD (v7.6.4) via FMC.The logs are being sent and received as expected. Here is an example of an IPS event log from the syslog server:<41>Sep 2 08:48:28 ...
My Cisco FTD keep sending me a critical alert every 5 minutes saying that a few of our FTD interface lack of input data:Severity: criticalModule: Interface StatusDescription: 2 subinterfaces of 'Port-channel20' are not receiving any packetsThere are ...
Hi everyone,I'm experiencing a UI/UX issue with the Cisco Secure Firewall Management Center (FMC). Version: 10.0.0 (build 141) Model: FMC for VMwareWhen viewing or editing the Access Control List (ACL) rules, the modal window/container is extremely s...
Hello,I am trying to monitor the Interface state of a FTD-1120 in the FMC.We do have interfaces with almost no traffic and so we excluded the "not receiving any packets" messages successfully. But we do not get any Health alerts when the interface is...
Hi All,I'm currently in the middle of setting up a new FTD 4225 which is equipped with two management interfaces. According to the data sheet, the management interfaces can be configured to be resilienthttps://www.cisco.com/c/en/us/products/collatera...
Hello everyone,I’m working with a Cisco Secure Firewall 1210CE Threat Defense running software version 7.6.4-69, protecting a small LAN.To improve security, I segmented the network into two VLANs:VLAN1 – 192.168.0.0/24: Oracle Database Server 19c on ...
Resolved! FMC: Automatic renew certificates?
Hello,Managing certificates is getting more and more a nightmare as the valid lifetime will be reduced to 47 days, especially on devices and virtual appliances that don't support any kind of automatic renewal protocol.What are the options in FMC to a...
