Good Evening... We are running ASA 5545X with 9.14(1) / 7.14(1). I am wondering if there is a CLI command to see the local password expiration in days?? Like showing the number of days left before the password expires. I understand in ASDM I can view...
Forum Posts
Hello, I'm unable to clear health alert "Interface Status" in FMC ver 7.2.5 after enable a pair of subinterfaces in the FTD. The detail of error is: Interface 'Ethernet1/6.250' is not receiving any packetsInterface 'Ethernet1/6.250' has no linkInterf...
Does anyone know if there are any functionality limitations on the lower-end FPR models like the fpr1010? I have a client that is looking to replace 5516's at their main site and DR site with fpr1140s. But it's occurred to us that since the DR is alm...
Hello,I'm having trouble re-registering my Firepower 1010 after I changed ISPs from Comcast to Starlink. I used to have a static ip address and I'm hoping I don't have to get a static ip address with Starlink. Is there a way to register the firewall...
Hello,I have configured a switch on ios 17.12.4 with the following command 'crypto key generate rsa general-keys modulus 2048.' Upon entering this command the following was output in the console:crypto key generate rsa general-keys modulus 2048' is a...
How to interrupt command line output on ASA,I try to press "Ctrl + C" ,but no response .
Trying to deploy both Web-Cache and HTTPS 443 WCCP to an FTD. I can get the 443 tunnel up, but not the Web-Cache, the deploy fails.Lina messages FMC >> clear session FMC_SESSION_1 accessMain-3120-SFW >> info : WARNING: This might result in parallel a...
Resolved! Bidirectional ASA ACL to FTD ACP
One of the things discovered with the Migration tool is it assumes the Inbound for an interface is default and only recognizes outbound. I have 3 DMZ interfaces that I control traffic from servers inside the DMZ to have access to other interfaces an...
7.6.0 is listed as both affected and fixed. Please can this be confirmed which is correct?
High-severity vulnerability CVE-2025-20111 is related to Nexus 9k standalone mode and could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial-of-service (DoS) condition. This vulnerability i...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
Palo Alto has a function in their firewalls called policy optimizer that can identify applications seen in a port-based access rule and then convert those rules to application based. I have not seen anything equivalent in FTD, so what’s the best stra...
Hey guys. I posted a few months back about an FPR issue I was having. I had an inside interface 192.168.1.1 and my outside 100.1.1.1. No NAT. Not going out to the internet. I wasnt able to ping from outside in. So I made an acl:access-list OUT-IN ext...
Resolved! Cisco ASA VLAN understanding
Hello team, I have been searching for a document that indicates the information I need and I have not find it so I believe may find something from your knowledge as well. I have an FTD that is managed by a FMC. The FTD has a physical interface that h...
How do I configure a recently deployed FTD to use a Syslog server that is on the other side of a Site to Site VPN connecting that FTD back to our main office? The other network devices at that location are easily able to reach the syslog server, but...
