Hi All,I'm currently in the middle of setting up a new FTD 4225 which is equipped with two management interfaces. According to the data sheet, the management interfaces can be configured to be resilienthttps://www.cisco.com/c/en/us/products/collatera...
Forum Posts
My Cisco FTD keep sending me a critical alert every 5 minutes saying that a few of our FTD interface lack of input data:Severity: criticalModule: Interface StatusDescription: 2 subinterfaces of 'Port-channel20' are not receiving any packetsThere are ...
Hello,I am trying to monitor the Interface state of a FTD-1120 in the FMC.We do have interfaces with almost no traffic and so we excluded the "not receiving any packets" messages successfully. But we do not get any Health alerts when the interface is...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
Hello everyone,I’m working with a Cisco Secure Firewall 1210CE Threat Defense running software version 7.6.4-69, protecting a small LAN.To improve security, I segmented the network into two VLANs:VLAN1 – 192.168.0.0/24: Oracle Database Server 19c on ...
Resolved! FMC: Automatic renew certificates?
Hello,Managing certificates is getting more and more a nightmare as the valid lifetime will be reduced to 47 days, especially on devices and virtual appliances that don't support any kind of automatic renewal protocol.What are the options in FMC to a...
Resolved! Allowing FTP Active Mode
On firewalls such as the Cisco ASA, is it sufficient to allow only port 21/tcp in order to permit FTP Active Mode data transfer?Client → Server (21/tcp)Server (20/tcp) → ClientIf I allow port 21/tcp, will the system track the data connection and auto...
Hi all,I'm a student doing home-lab practice with an ASA 5500-X / FirePOWER setup. Cisco has since removed these files from the download portal, so I can't verify them against the official checksum anymore.Could someone who downloaded these directly ...
Hello , i have an ASA firewall ( 5525) and i want to configure a scheduled backup , is there any documentation about this please ?best regard
Resolved! No Failover Active command
Hi All, I have an active/standby pair of ASAs in transparent mode. 5515x running 9.1 (2). I have been trying to test failover by issuing the no failover active command on the primary. I thought that when I done this on the primary/active unit it woul...
I have a pair of FPR2130 running ASA code in HA. Everything looks configured OK to me, though obviously there's an issue somewhere! sho failover presents no errors.I need to failover to compete a firmware upgrade, however when via the primary device ...
Hi All FTD 3105 : the disk /dev/nvme1n1 is unable to be unlocked or reverted with the existing SED key We have a new 3105, displaying the following message. When we proceed it reverts to the same screen. After a couple of reboots, it shows the...
Hi everyone,I'm developing a firewall configuration-audit/parser tool and I'm looking for a genuine factory-default Cisco Firepower Threat Defense (FTD) configuration for testing.I'm particularly interested in:- FPR-2110- FPR-2120- FPR-2130- FPR-2140...
Resolved! Asymmetric Routing with Firewalls in HA
Recently, an interviewer asks me about Active/Standby HA. His question was what'll happen if the tcp ack get's back from the standby firewall, considering the configuration is stateful which means state tables were shared between both.In my opinion t...
Hello all, I wanted to see if anyone knew if i am able to download and push the newest secure client software on our older ASA. We currently use anyconnect ver 4.10 and would like to get this higher prior to our migration to FMC. I only see Secure Cl...
