Hi We are planning on migrating configuration on 4110's acting as an internet perimeter firewall to a dedicated container instance running on 4225's. Problem I see right now is that there are 150+ tunnels configured on the 4110's and it doesn't look ...
Forum Posts
Currently, we have one of our NGFW configured for VPN use and able to connect to it successfully. We are exploring the use of DAP for added control in who can connect to our VPN, so, we had configured some basic settings. If we don't have it assign...
LAN:192.168.88.254/24ASA5505(branch)WAN:60.0.0.1------Internet------WAN:59.0.0.1CP1555(HQ)LAN:192.168.169.254/24Cisco Adaptive Security Appliance Software Version 9.2(3)Checkpoint 1500 Appliance Version R81.10.10 (996002945)Here's partial running con...
All,I've been tasked with obtaining an alert whenever a security intelligence feed or list is added/removed/modified within Security Intelligence but only have been able to find a means to alert on events discovered from SI.Might anyone know of a way...
I have setup up a number of FTDS that are managed by FMC in CML labs. I have setup the in-built desktop in CML that is hanging off a FTD. I am able to get the internet via FTD-->Router (NAT)-->External Connector and I am able to get internet access f...
Hello,I have set up a FTD managed by cdFMC for remote access VPN. For authentication I use SAML with Azure AD as an IdP. The authentication itself is working fine, but the user identity of the session viewed in FMC has "Discovered Identities" as it's...
Hello, I have a customer with two FTD 1010 in HA managed with CDO (no FMC). Previously we were on the ASA platform and, with a little tool called FirePlotter, we saw the bandwidth usage in real time. The tool provided in CDO or FDM are not enough acc...
If primary ISP go down. The secondary ISP is not working in PBR. All configuration is working fine. ISP failover is fine. Only in route-map have problem, the secondary ISP is not workiung
Hi, I'm trying to set up PBR (Route Maps) on FTD managed by FDM but I'm finding it impossible, on ASA it would look something like thisaccess-list ROUTEMAP-ACL1 extended permit tcp object CloudKey1 anyroute-map ROUTEMAP1 permit 10 match ip address R...
Dear Comunnity: I have the following question can i copy a back up from an FTD administrated via FMC to an Stand Alone FTD managed just with FDR, i cant find any oficial information about this topic, please i need your help
Resolved! Snort3 rate filter
Hello, Im trying to configure rate filter in Firepower Snort3 according to this reference: https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/snort3-inspectors/snort-3-inspector-reference/rate-filter-inspector.html For single rate filter ...
"I've configured syslog forwarding on my Cisco ASA to send logs to Secure Network Analytics, and the ASA's logging configuration is complete. However, I've noticed that the UDP TX counter for this destination is consistently at 3, which suggests logs...
I have a use case where I need to deploy FTDv (FTDv100) in a HA pair utilizing two physical servers with the ESXi (7.0.3 - Dell Version) hypervisor, one FTDv 7.4 instance on each. Following the Cisco deployment guide, I am attempting to leverage SR-I...
HiSo I am planning on exporting the policies of several FTDs managed by the same FMC running 7.0 I will then be importing the policies to a new FMC which is running the same version 7.0 this FMC will then be upgraded to 7.4 and a My questions are1....
With 45-day certificates in the horizon, it is time to start looking at automating certificate renewals within the FMC and FTD. While adding certificate objects can be done over API, I found many things seems to be lacking - or I am looking at the wr...
