Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I need to create 2 VPN Profiles. 1) Legacy non-MFA, 2) MFA. Admin machines have both. Users only have only MFA. Need to hide Legacy from Group Profile selection, only accessible from Admin profile. This is to be used if MFA breaks for some reason.Wha...
We have Cisco Secure Client 5x. VPN to an FTD 7.7.11 managed by FMC. VPN works well for all traffic except from VPN Client to VPN Client. Hair pinning is configured. The problem we are facing is that two users on VPN cannot hear audio on a Jabber cal...
Hey all,Does anyone have experience using the Threat Defense Model Migration? We are migrating from a 2110 in HA to a 3105 in HA. We are debating whether to do this manually or is it less error prone to use the migration utility built into FMC?Thanks...
On the FPR-2110 we may be experiencing an issue with time synchronization that might be preventing SAML auth.In system support diagnostic-cli the clock appears to be several minutes off.When I show time from a regular cli prompt, time shows correct.T...
I'm working on a project to enable Internet failover for any of our offices (see diagram). We have four paths to the Internet and three pairs of firewalls. So far my failover configuration is good for the remote offices. It was challenging but we wen...
We are using FMC. Thanks, this is the approach I was leaning towards. We have a deadline looming. I was thinking we might push the User MFA only VPN Profile via FMC, then manually assign the Admin profile by copying it to the client. My understanding...
Thanks, it is. I'm leaning this way. Seems like the outcome might be more predictable. I've stood up enough of these lately. Also I can't find much of anything on user's experience using the Migrate tool. If it could migrate certificates I'd take a c...
Thanks, I have the guide. I just have not tried this yet. If it works well, it looks like it would be a time saver. If it tends too be buggy, I think I'd rather manually do the migration to avoid delays with opening TAC cases.Thannks,David
You know I tried but they just wanted me to do the workaround, rebooting and failing over. That did work for now. Azure MFA is working. We are working towards replacing the 2110s with 3105s so this hopefully will become a non-issue.
So, I did try changing the Timezone to UTC. It didn't change anything. After extensive t-shooting with TAC it appears that the LINA side is experiencing a time drift. It is odd. Logging into FTD and inputting show clock shows correct time. Connect fx...
