I've created a VPN successfully from a Cisco FMC managed FTD (v7.4.2.4) to a AWS VPN gateway, but am having issues as the IKEv2 phase 1 SA lifetime doesn't match. The AWS side always uses 28800 and I've configured a policy on the FTD to use 28800 se...
Forum Posts
I currently have an FTD that has public DNS configured on the management interface (>show network, >show DNS system have Umbrella IPs). I have internal DNS IPs assigned to inside data interface using the platform policy. I did not check enable DNS...
Hello,I would like to grant an administrator read-only access limited to Access Rules, NAT Rules, and Objects via ASDM.I have already configured TACACS+ authentication and authorization using Cisco ISE, however I’m struggling to identify the exact sh...
Hello , i have an ASA firewall ( 5525) and i want to configure a scheduled backup , is there any documentation about this please ?best regard
Hello,We are using a Cisco ASA 5525 firewall and have recently migrated our WAN interface and renamed it. As a result, we need to update all ingress rules by changing the interface from "outside" to "wan".access-list outside_access; 10509 elementsIs ...
Hi, is it possible to set up FMC High Availability with one FMCv and one FMC Hardware Appliances.I can't find any official statement that rules this out. kind regards Alex
I am reading doc on Cisco FTD intrusion policy, can anyone explain to me what the difference is between Rule state and Rule action in Cisco FTD firewall intrusion policy?
Hi, I have a Site to Site VPN configuration on FTD 3110 version 7.6 managed by FMC. There is a subnet mentioned for protected network. Customer has a ask that they want to exclude some of the traffic to go via that tunnel if they are trying to reach ...
Hi AllI am aware of BGP flowspec, you have a server (flowspec controller) and clients which are the bgp neighbors to the controller?How does it actually work in practice? do all the ISP routers send netflow information to the controller and based on ...
I am trying to upgrade FXOS from 2.10 to 2.16 on 4100, I uploaded package as usual and clicked on upgrade. There was a message saying package is being unpacked and them a message about comaptibility with FTD instance running in the device. Accepted a...
Hey all, I currently have an HA pair of FTD 4145 running v7.6.2 When I run command "show failover state" I get a state of Sync Skipped - STANDBYCan anyone provide some clarification as to what this state means and why the sync was skipped? Has the H...
Resolved! FTD Route Based VPN question
HiI have a static Route Based VPN and am wondering if I create a loopback interface on the FTD is there a way to allow this IP over the VPN to test the VPN or generate some traffic from the FTD across the VPN ?? Thanks
We have Cisco FTD 2110s that are managed with FMC and we are trying to figure out how to block access to our remote access VPN by IP. We already have a geolocation block for Access Control in FMC. But, are we still not able to do geo-ip-based restric...
We have a 3110 with version 7.6 managed by FMC 7.6. The flow is User >> WLC >> Core Switch >> Cisco FTD >> Internet Switch >> ISP Router 1 & ISP Router 2. On FTD we have created sub-interfaces of 10 Gig link and we have two 1 Gig links from ISP. We a...
Resolved! FTD over Remote FMC - 2 FMC Setup
Hi All, I'm in bit of a pickle here as I have a task at hand that has 2 FMC's and 2 FTD's present: Below is the scenario; In an existing setup that constitutes of a FMC(VM) and local FTD's deployed in HA, lets call them FMC-A and FTD-1) are in produ...
