I am not an advanced level SSH tech but can find my way as required but for this I need assistance. I've inherited a switch stack that points to a 2008R2 NPS server to login. Please assist with the commands to change the NPS/RADIUS server it uses to ...
Forum Posts
HiJust wondered if any new that if I added DNS servers to the DNS group in platform settings that this is disruptive, I;m only adding additional Servers.?? Also is adding NTP Servers on FMC disruptive at all.? Thanks
Hi,I have an FTD 1120 managed by FMC,topology; I have 4 internet feeds going into the firewall (migrating down to 2) with multiple VRF'sProblem: i created a new VRF and added a leaked route to one of the internet feeds however I get the below error, ...
Hi, I have an RAVPN solution deployed at two different sites. They each are supposed to use different address pools but when I change one pool it changes the other.. how do I get around this?Site 1The address pool for site one should be 192.168....Si...
Hello Cisco Community,I want to ask, when tried to show object-group, i found ACL Count in Minus, what does it mean? We didn't any ACL for this object-group (the minus one). Is this a bug or not?
Hello guys, FMC 7.2.8, Firepower 4112 7.2.7 lately I have upgraded Firepower from 7.0.0 to 7.2.7. Both are used as Intrusion policy, checking traffic between Nexus server switches and L3 core switch. No NAT, no routing policy, nothing. But after upg...
Our FMC keeps throwing in the same VPN status event "VPN tunnell between FWA/peerip/subnetX and FWB/peerip/subnetY is inactive due to to Deleted backup session" Firstly any idea what a backup session refers to? If its a VPN SA, well I've checked the ...
Dear all,In our lab we have some EOL Products (some of the are realy old). I would like to check the latest -interim software für these devices. Cisco ASA 5505 (we have: asa904-42-k8, 917-32-k8, 924-k8...)Cisco ASA 5512X IPS, 5515X (we have: asa9-12...
Hi there we are trying to configure tcp bypass in flex config following cisco documets:https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/211628-FTD-How-to-enable-TCP-State-Bypass-Conf.htmlhowever we got an error as "Unsupported cli -...
We have Cisco FTD 2110s that are managed with FMC and we are trying to figure out how to block access to our remote access VPN by IP. We already have a geolocation block for Access Control in FMC. But, are we still not able to do geo-ip-based restric...
We recently noticed a sharp increase of brute-force activity against our Cisco 5555X Firewall, which provides our remote access VPN.I inherited this firewall, so I want to ensure we are taking advantage of all available options to harden the ASA.I se...
Hi All.I have a Cisco ASA 5510 running Version 8.3(2) on which I've been having a problem getting a DMZ server to commiunicate back into the Internal network. While trying different ACL's and NAT's to get this to work I've come across something stran...
Does the FMC virtual on premises support High Availability design synchronizing the policy configuration between them ? If so is there any bundled license or do I have to double SKU´s in CCW ?
Hello everyone, as mentioned in the title we have two ASA-5516-X devices with Software 9.16.4 (57), recently we have been experiencing that authentication through AAA (Cisco-ISE) fails for some reason approximately every 7 days and we have only manag...
Hi All, We have upgraded Asa 5516-x to latest and final version 9.16.4 which got successfully. But post that we are getting the warning for Platform FPGA/ROMMON version is older than minimum recommended image as currently ROMMON version is 1.1.8. No...
