I am using 2 ASA 5512Xs with the same bin, version 9.12(4).67 , hardware (4GB ram and clarkdale 2.8Ghz cpu), and license (security plus) but when I do show failover state it says there is a communication failure between the two. I am connecting them ...
Hi, We have a set of FTDs and using FDM for management. Found some answer about the Variable Set being the feature not available in FDM. However, I am hoping that someone can recommend a smoother workaround to create it there besides the FlexConfig...
Hi, I want to perform a migration from vFMC to FMC Appliance in HA. Will there be any traffic downtime during the migration process, and what are the best practices? Thanks
Hi Team, kindly need you info regarding this Error that showed up after Optimize ACL, Object , etc BLOCKED : OSPF Configuration already exists on the FMC. Please disable OSPF on the FMC before proceeding with the Migration what causing this issu...
generally , in one static 1 to 1 NAT the output of show xlate shows as below right .ham-vpn-fw/ham-vpn-fw# sh xlate | in 172.20.164.139 NAT from outside:10.90.0.18 to cbtsmgmt:172.20.164.139 ham-vpn-fw/ham-vpn-fw#but in one of my case showing as bel...
Hi to all,my topology is like the following:subnet A --> R1 <-----Internet--> Edge Router <----> FTD<---> Various VLANs in the inside ZoneBetween R1 and FTD runs an IPSec VPN. Internet connectivity is provided by the Edge router. What is not clear to...
Does anyone know how to configure a Pre Logon Banner on a FTD non FMC managed running code 7.x?I can't see that it is at all possible. The CLI won't let you write any change out regarding a banner. The API explorer has no option and the GUI menu also...
I'm new to using cdFMC and planning to add two FTDs configured for high availability. What are the recommended interfaces for management? Should I use a data interface for management purposes on both firewalls (two public IP addresses)? Additionally,...
I went to update a pair of FPR1140 that are in HA yesterday using FDM. I had read conflicting instructions online. Ciscos instructions were saying log on to the standby unit (which i cant as its in HA) so I went with some other instructions that sai...
A question that has me intrigued... "Packet Tracer" allows you to place activation key for ASA. How do I ask for the activation key (from which person or manual or software)? ---> If it's software... Is it to activate ONLY some functionality or d...
Hi All,I've asked a question a few days ago on this 4 year old post but unsurprisingly haven't had any response so starting a new post. We had a requirement to allow wildcard access to a remote SQL server over tcp/1433, as the host portion of the des...
I'm planning to update the ASA and ROMMON software on a ISA3000. I've tested it in our lab first and during the testing I've been connected through the console port. This is nice as I can see what is going on during the reload processes. However, whe...
Hello Community,I have Active Directory successfully integrated with FMC.My goal is to apply a Dynamic Access Policy (DAP) to my FTD, where the DAP should match a specific Active Directory group and apply a corresponding access policy (for example, A...
These are the 2 documentations that we followed to ingest Cisco device syslog into our Sentinel instance: https://learn.microsoft.com/en-us/azure/sentinel/forward-syslog-monitor-agenteStreamer eNcore for Sentinel Operations Guide v4.0.9 - Cisco Issue...
Hi All, How can I solve this flexconfig error for "access-group". My FMC version is 7.7.10 & the FTD devices (in high availability) version is 7.6.1Thanks.Nakpane
