Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello All, We have an issue with ISE and we need to understand if we can export the policies he have on our ISE via CLI so we can then proceed in importing them to a new ISE server.Also to the same effect is there the possibility to export the config...
Hello All, For the past year or so we have started using solely FTD devices, managed via FMC, for some of our main sites. In one of those sites we want to accommodate site-to-site VPN failover via the the pair of FTDs on site (2140). Unfortunately th...
Hello All, I have scenario that is totally new to me. I have a site with two FTD 2140 configured as and High Availability pair (Active, Standby), over FMC.The Primary/Active firewall connected to ISP-A and the Secondary/Standby firewall is connected ...
Hello All, We have configured a while ago an FTD 2140 via FMC and it has been running with no issues whatsoever. Now we have acquired a second FTD 2140, imported it to our FMC and we want to add as a failover to the existing one. Will that disrupt th...
Hello All, We have a remote office where we run a standalone FTD 2140 appliance. Now there is the need to add that appliance to an existing FMC. The 2140 appliance has locally configured routing (inside & outside interfaces), several site-to-site VP...
Hello Rob, Thanks for your reply. The pair of FTD on the site is our main firewall and our VPN appliance. We have two ISPs on the site configured to failover, but currently we use site-to-site VPN only on one. We want to be able to do so for both ISP...
Great! Thanks Rob. I will them put ISP 2 on a different interface than ISP1 and then go fro there with Cisco's config guide.Thanks so much for the help!I will update once I have this up, or any other issues...
Hello Rob, It has been a while since my original post and your reply but now we managed to get another ISP!Ii was connected to the same port as the original, i.e. Primary (live) ISP is on Ethernet1/1 of Firewall A (Active) and the Secondary (new) ISP...
