Network Security

vpn(config)# crypto ca enroll acme_cert % Start certificate enrollment .. % The subject name in the certificate will be: CN=acme_cert % The fully-qualified domain name in the certificate will be: acme_cert % Include the device serial number in the...

After deploying a new FTDv 7.x, I encountered an issue where, after configuring the Management IP settings (including Device IP, Gateway, and Mask), I couldn’t ping any devices on the network. I received a "No Route to Host" error, which was puzzling...

Hello! We recently upgraded our FMC code from 7.4.2 to 7.4.3 and when it finished installing the new software we started getting this message saying: "The size of MariaDB undo files has reached 1.39GB, and it exceeds the threshold of 1 GB. Contact TA...

I have the latest FTD running which is 7.7.0 on Firepower 1010.  From the web interface i open a CLI popup window.  I used to be able to just enter "show environment" and it would show me the temp but now it just says command execution failed.  It ha...

Hi Team,Can we migrate configuration from an ASA  to an FTD FPR-1150 that is managed by FDM?Does the Firewall Migration Tool support migration to FDM, or is it only supported for FMC ????ASA model and version : 5525 / 9.14 FTD : FPR-1150

Hi All, After certain FMC and FTD upgrades, it is possible to encounter a situation where the FTD fails to register back to the FMC even though all connectivity checks appear normal. FMC and FTD can reach each other, port 443 is open, and the sftunne...

Hi Cisco Community, I am looking for guidance on onboarding a branch FTD to our HO FMC. The challenge is that the client is providing only a single /32 public IP at the branch site. Additionally, the branch needs to access certain customer portals ho...

Hello,I am doing an upgrade for a customer for different FTD platforms managed by FMC version 7.7.10 While upgrading to the current (20/11/2025) recommended version from Cisco => 7.6.2 We are seeing the following fault, only in the 1120 1 Critical Ev...

Good morning: I have a port mirror on an interface.This traffic is causing intrusion events.How can I filter them?I've tried putting this traffic in a trust rule in the access control policy, but it doesn't work.I've also tried putting it in a prefil...

We have two FTD 1140ns running 7.6.2.1 (HA) managed by a FMCv running 7.6.2. We have been getting high data plane errors (82 and 83%) respectively on both. I have tried disabling SNMP and making sure I only have one Secure Connect client image loaded...

please suggest appropriate board to post my question if this is not the correct boardWe have a cisco 4110 that we need to upgrade to Ciso4215 .. and I need to figure out how to proceed. Our plan is to move to Cisco Security Cloud regardless of the ap...