About tahscolony

tahscolony · 07-23-2024

I currently have a 7125 Firepower with dual inline sets. No IP's assigned to any interfaces, just the policy for Geoblocking and other protection. BGP does pass through it as it is inline with the routers and the ASA 5555-X which receives Default via...

tahscolony · 07-11-2024

To use the tool, you need an FMC with the device you want to migrate to registered to. Right? Otherwise, how will it get to the device. To register it, you need an IP, which is on the management interface, or converged mode. So, why is it when going...

tahscolony · 06-24-2024

I am trying to import the policies from my on prem FMCv which has the latest available version 7.4.1xx, exported the policy, them went to CDO and imported only to get an error that the CDO version is 7.4.2 and incompatible with 7.4.1. How am I supp...

tahscolony · 06-24-2024

Is it possible in multi-instance mode to run both the FTD and the ASA images? Currently in the process of replacing both the 7125 IPS and the 5555-X firewalls with the 3120.

tahscolony · 03-20-2024

We have a few locations with DMVPN tunnels back to a pair of 4451 routers. They use OSPF for internal routes, the remote router uses Area 1, the head end routers are Area 0. They route fine when both routers are active, but today we discovered that ...

tahscolony · 07-29-2024

The FMT has a LOT of bugs to work out still and it is not ready for primetime. What I discovered is when the ASA is configured for Management VRF, and things like Radius, Tacacs, Accounting, Monitoring are using the Management interface routing tabl...

tahscolony · 07-29-2024

Excellent. I had a feeling I was on the right track. The FTD difference is in licensing, with AMP and URL, so was not sure if it would act the same as the current 7125. This should go pretty smoothly then. I will add a BGP allow to the Mandatory, an...

tahscolony · 07-10-2024

I am having this issue and it is driving me nuts. On the first go'round, all interfaces validated fine. The VPN had issues with missing items and had to start over, never got past the VPN. My second trip through the Management interface would not v...

tahscolony · 07-09-2024

I figured it out, the policy from the 7125 was "locked" so couldn't be edited, I copied and applied it so now it pulls the correct interfaces. The big thing was not having to recreate the policy in use.

tahscolony · 07-08-2024

Being 5 months later, I don't know if you figured it out, but I am doing a similar thing, but instead of trying to control the 2 devices with one FMC. I spun up a second FMC with the correct versions by cloning and upgrading the FMC so the policies c...

Member Since	‎05-26-2015 09:41 AM
Date Last Visited	‎07-31-2024 07:01 PM
Posts	171
Total Helpful Votes Received	20

User Statistics

User Activity

BGP and Transparent IPS on 3120

ASA to FTD Migration tool not working

On Prem FMCv and CDO FMC version mismatch

3120 wih FTD & ASA

OSPF failover failure over DMVPN

Re: ASA to FTD Migration tool not working

Re: BGP and Transparent IPS on 3120

Re: Firepower Migration tool - Validation Error

Re: Firepower 7125 EOL soon, What to replace with?

Re: FDM for IPS