About atsukane

atsukane · 01-22-2026

Hi All,I'm seeing tons of %FTD-4-419002: Duplicate TCP SYN from Inside:x.x.x.x/36769 to OUTSIDE:y.y.y.y/80 with different initial sequence number on multiple FTDs where the source IP x.x.x.x is ThousandEyes Enterprise agents' IPs.I've found this doc ...

atsukane · 01-16-2026

HI All,First of all, apologies in advance if this is an obvious question, however, I'm a bit confused how to configure syslogs for FMC managed FTDs.FMC is 7.6.2.1 and FTDs are mixture of 7.6.1.1 and 7.4.3, but in this specific case FTD2k running 7.4....

atsukane · 11-07-2025

Hi All,I've asked a question a few days ago on this 4 year old post but unsurprisingly haven't had any response so starting a new post. We had a requirement to allow wildcard access to a remote SQL server over tcp/1433, as the host portion of the des...

atsukane · 09-04-2025

Hi team,I'm having trouble with Cert based authentication for RAVPN to work on FTD (FPR2140) managed by FMC, both running version 7.4.2.3.We've been using Microsoft NPS with Azure connector as a RADIUS server for MFA, but as our NPS servers would be ...

atsukane · 06-06-2025

Hi All,We have 2 x 1Gbps Direct Connect between AWS and HA pair of FPR2140 (FMC managed) running FTD ver.7.4.2.1, BGP and ECMP to load balance the traffic. There are L2 switch in between them to split the single circuit to 2 firewalls.AWS's default k...

atsukane · 01-22-2026

TACのケースをオープンして照会したところ、tcp state bypassはGLOBALレベルのみのサポートという回答でした。以下、TACからの回答ですが、要約するとシスログ419002は、特定のインターフェースレベルで対応前にトリガーされるということです。すいません、日本でうまく説明できません Key PointOn Cisco Secure Firewall Threat Defense (FTD), tcp-state-bypass is only fully effective wh...

atsukane · 01-22-2026

TAC has confirmed that only GLOBAL is supported, here's their response:On Cisco Secure Firewall Threat Defense (FTD), tcp-state-bypass is only fully effective when applied as a GLOBAL service policy.Although the CLI allows attaching the policy to a s...

atsukane · 01-22-2026

OK, thanks for your time @balaji.bandi , appreciate your input.

atsukane · 01-22-2026

that's what i've done, the problem is while tcp-state-bypass works when using GLOBAL, when you select specific interface/zone it stops working. So my question was whether the GLOBAL is the only option supported. After having a better look, i do see s...

atsukane · 01-22-2026

Yeah, I've seen this one which is aimed at older FMC version, i think 6.2 or older.With our version, the suggested config receives "Unsupported CLI" error, and the only way to add a tcp-state-bypass is via the Threat Defence Service Policy which can ...

Member Since	‎05-03-2016 04:05 AM
Date Last Visited	‎01-21-2026 05:31 AM
Posts	222
Total Helpful Votes Received	90

User Statistics

User Activity

TCP-state-bypass on FMC managed FTD

Send RAVPN syslogs FMC managed FTD

FMC/FTD - Wildcard URL objects and use of the leading dot

FMC managed FTD Remote Access VPN Certificate Based Authentication

BGP ECMP and BFD between onprem to AWS

Re: FTD: FMC での TCP state bypass 設定方法

Re: TCP-state-bypass on FMC managed FTD

Re: TCP-state-bypass on FMC managed FTD

Re: TCP-state-bypass on FMC managed FTD

Re: TCP-state-bypass on FMC managed FTD