Hi,We have an ASAv in Azure, its a single firewall with no load-balancers.Is it possible to add a second public IP address to the ASAv, is it just a matter of adding a new private to public ipconfig setting? do i need to do anything on the ASA such a...
Hello Everyone,I have recently used cisco firepower 1120 for one of our customer, without any additional licenses. So as per my undertanding all the firepower comes with base license as perpetual. So, I proceed it with basic configuration, which give...
Our current ACAS scans are showing plugin 157288, TLS Version 1.1 Deprecated Protocol findings on Firepower 4120 and Firepower 4125 with FTD devices.The Firepower 4120 is running version 7.2.9,The Firepower 4125 is running version 7.4.2.2I am asking ...
Hello everyone! I'm curious if someone had similiar case? I'm wondering is it possible to configure FTD managed by FMC to do additional authentication based on destination host with Yubikey for users that are already connected with anyconnect. I'm tr...
Hi All,We have 2 x 1Gbps Direct Connect between AWS and HA pair of FPR2140 (FMC managed) running FTD ver.7.4.2.1, BGP and ECMP to load balance the traffic. There are L2 switch in between them to split the single circuit to 2 firewalls.AWS's default k...
Hello,I was going thru the list of host profiles included in FMCv v7.6 and there doesn't seem to be a lot of options for UC servers. For instance, I found an option for Unified CM but the latest version I can select is v6?? Ideally I was looking fo...
Hi.I have a problem with RA VPN DHCP configuration. VPN users get IP address from the local pool just fine, but when I try to use my Windows Server 2012 R2 DHCP server, i get the following errors and it always falls back to local pool: IPAA: Session=...
Hello,As a business we are auditing our network equipment, is the managed switch SF-300-24PP still receiving firmware updates/support.If so when till and if not when did its support end.Thank you
Dear All,I was trying to add a logical name to one of our internet faced physical interface to bring it to high availablity monitoring. But we have a sub-interface under this physical interface which is the actual internet logical interface with IP c...
I’m currently working on a POC setup with Cisco FTD managed by FMC (7.4), and I’ve configured a File and Malware policy to test file detection and logging. However, I’m encountering an issue where no file events are being logged in the File Events or...
I am getting the following Health Alerts on FMC running 7.7.0:How can I resolve these issues?
Hello, I see there is no way to "never shun" an IP address from the VPN Threat Detection feature on the newer ASA code. This needs to be added. With CGNAT being common ISP practice, we need to be able to tell the ASA to never shun a certain IP addre...
Hi Team, I have a question about QoS on FMC version 7.4.2.2. In Devices I am able to configure speed limit etc. But what about applications? What if I want to set that, for example, communication to a public IP or Web application should have priority...
Tell me how to disable SIP traffic inspection on FTD via FMC? I read that this is done via FlexConfig on FMC.1. I created a text object - Disable_Inspect – Multiple – Add “SIP”2. In FlexConfig Object, I created an object from a template and entered t...
Does the FPR family, specifically the FPR1010 support the “License Reservation” feature of off-line Smart Licensing? If so, how does one create a “Reservation Request Code” on the FPR1010? Thank-youTom
