Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello, Using FTD Version 6.5.0.4 on FPR2110, and managed with FMC. I am trying to access SNMP in LINA via the inside data interface, and it is being denied.The sanitized packet capture below shows an output-interface of "NP Identity Ifc", which I und...
Hello, We are using a pair of Firepower 2110s running FTD version 6.5.0.4, managed with an FMC. Remote VPN with anyconnect has been successfully configured with a split-tunnel arrangement of "tunnel all". An outside/outside NAT rule was added to al...
Hello, We are having issues setting up firepower anyconnect authentication with LDAP/AD. We have a realm setup with our AD servers. We can obtain users/groups from AD with it, and can authenticate into the FMC with AD credentials. However, when it...
Hello,We are migrating from ASA 5525 to FTD 2110 running FTD/FMC 6.4.0.6 and cannot seem to get active-mode FTP to work through the FTD for a client on the inside connecting to an external Internet server on the outside. The initial control channel ...
I understand from the Cisco documentation that a service-policy applied to an interface on an ASA 5500 series firewall, will override the default global service-policy. However, I am not clear on whether it will override the entire global service-po...
Yes, if I remember correctly you are on the right path.Create a new realm similar to your example.Then go to Directory -> add Directory and fill in with a connection to your DC.If all is working, you should be able to go to User Download and pull inf...
Hello, I too, found different ways to setup the AD authentication. I think it may have to with changes between different versions. I am using FTD version 6.5.0.4, and in the end I just setup a Realm under System -> Integration -> Realms. Once I ha...
Cristian, So to enable uRPF, I would need to select "Enable Anti Spoofing" under Interface->Advanced->Security Configuration for my outside interface in FMC. Correct? Thank you for the advice, Paul
Hello, So I think I have figured this out. I had the "Bypass Access Control policy for decrypted traffic (sysopt permit-vpn)" option selected under VPN->Remote Access-><selected device>->Access Interfaces. Once I de-selected this, the Internet traf...
