About CiscoPurpleBelt

CiscoPurpleBelt · 06-25-2024

Few question, have a simple setup for FTD managed via FMC. FMC/Internal network >>>>> FTD/Outside int >>>>ISP/Internet>>>>>>><<<<<<<<FW/Peer Tunnel Device<<<<Internal NetworkI see in this doc https://www.cisco.com/c/en/us/support/docs/security-vpn/ip...

CiscoPurpleBelt · 09-07-2023

Looks like a service pack is being used - current 16.0.9 version.To upgrade I would just install another and/or latest service pack correct? Currently "show boot" points to a packages.conf, so would the new package be similar (I am used to pointing t...

CiscoPurpleBelt · 07-10-2023

Is let's say creating an ACL (permitting public IPs of where someone with a laptop Anyconect client to attempt to connect to FW) and applying to the interface of the FW Anyconnect is enabled on better way to try and keep anyone from just trying to es...

CiscoPurpleBelt · 07-10-2023

See this message on the FTD when looking on FMC. Will clicking the re-enroll certificate cause any issues?

CiscoPurpleBelt · 07-07-2023

Trying to add FMC appliance to Umbrella but keeps failing when hitting the TEST button.I am entering the API key, secret, Org ID, etc. correctly. Docs are bit vague on this process but following thishttps://docs.umbrella.com/umbrella-user-guide/docs/...

CiscoPurpleBelt · 06-25-2024

Ok yea just still on 7.0.6 so will just create a VTI, its source will be Outside int, and will assign the tunnel mode IP using an unused IP from an existing internal private subnet which already has NAT statements created.

CiscoPurpleBelt · 06-25-2024

Ok yea only at 7. right now. When just creating a VTI in general, I would choose the Outside interface Security Zone correct? In the settings for IPsec Tunnel Mode in the Add Virtual Tunnel Interface, that is where I enter the private IP I would lik...

CiscoPurpleBelt · 06-25-2024

Hi yes the public IP would be from a public block already assigned by ISP.Are you suggesting just creating a private IP from a subnet that is not currently used if I were to use a private IP for VTI?

CiscoPurpleBelt · 05-03-2024

Right but thing is the FTD has been offline recently and clock was never manually hard coded or anything. Where would it get its accurate time from?

CiscoPurpleBelt · 05-02-2024

Hi Marvin, although it states:NTP Server : 127.0.0.2Status : Being UsedOffset : -0.582 (milliseconds)Last Update : 13 (seconds)The time is still correct:> show timeUTC - Thu May 2 14:43:14 UTC 2024Localtime - Thu May 02 10:43:15 EDT 2024Shouldn't it ...

Member Since	‎09-06-2016 11:48 AM
Date Last Visited	‎05-22-2024 01:27 AM
Posts	1,221
Total Helpful Votes Received	116

User Statistics

User Activity

Create IPSEC Point2Point using VTI on FTD (FTD code)?

Upgrade Catalyst C9500 16X? Which software?

Anyconnect filtering?

"Identity certificate import required" on FTD

Add FMC to Umbrella?

Re: IPSEC using VTI on FTD (FTD code) managed via FMC?

Re: IPSEC using VTI on FTD (FTD code) managed via FMC?

Re: IPSEC using VTI on FTD (FTD code) managed via FMC?

Re: FTDv managed by FMC ntp issue

Re: FTDv managed by FMC ntp issue