Hello everybody, I have been tasked to upgrade a HA pair of two FPR-2110 running rel. 9.18(4)22. I checked the upgrade guide (see screen dump attached):https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.html#id_...
Forum Posts
Hi,The recommendation for failover link between two firepower devices in active/standby setup is to be the same bandwidth as the data interface.The Firepower 1150 has only 2 x 10 Gb/s SFP+ interfaces, the rest are 1 Gb/s. When using the two 10 Gb/s a...
Resolved! How to route VLANs on Firepower 1010
OK for the life of me, I cannot figure out how to route VLANs so that they have Internet access. Whether I choose Access or Trunk, I simply cannot get it to work. Online searches turned up absolutely nothing, not even the Cisco documentation could ...
How do I implement the Failover license function under FPR1010-NGFW-K9? Do I need to buy a license? Or does it come with the relevant subscription?
Hi, I'm currently unable to connect to the standby ASA using ASDM or SSH. I can connect to the active ASA through the outside interface without any issues. However, as part of the ASA upgrade process, I need to access the standby unit via ASDM, but I...
We have two data centers HO and DR. We have VPN firewalls in both data centers and we are planning to purchase certificates to use for Anyconnect in these firewalls. I know that we can use SAN names in a single certificate (like ho-vpn.domain.com and...
I’m trying create a configuration where a firewall with a single public IP address can forward incoming connections to an internal server. While this seems straightforward, I’m encountering issues and would appreciate any guidance.The best documentat...
Hi All,I'm currently setting up a pair of 4225 FTDs in active/standby HA using a port-channel interface as the failover/state link (Po48 with member ports Eth1/7 and Eth1/8). The FTDs are running version 7.4.2.1. HA establishes ok and failover works ...
如何在FPR1010-NGFW-K9下实现故障转移许可证功能？需要购买许可证吗？还是附带相关订阅？
Hello Guys, I am testing the active-passive failover in FTD. First of all the failover works fine for me, but I have query related to the timeouts I received during the testing. My testing process is as follows. Let’s say I have two FTDs, FTD-01 (pri...
Hello, I'm having issues login to the FMC GUI and need to generate a troubleshooting file from the CLI and send it to TAC. I have generated the file using the sf_troubleshoot.pl command from expert mode, but when trying to download the file from my ...
Our ISE environment only authenticates wired connections and passes VPN authentication from our ASA firewalls on to our Active Directory. One of our VPN firewalls gets brute forced hit pretty hard. Luckily it is with attempts with usernames we don'...
I'm setting up a Cisco Firepower 2130 FTD, no FMC. This is for a lab environment.I want to be able to ping thru the Cisco Firepower 2130 from a switch on the inside interface to a switch on the outside interface and vice versa to check connectivity. ...
Hello,My Cisco FirePower 1120, does not boot due to SSD disk failure and at this point I need to replace it with a new one and I am wondering to know, how can I Perform a Complete Reimage of the new SSD disk.The ROMMON version installed is 1.0.25 and...
Does it really matter which port you enable on a sensor/FTDv (managed on FMC) for passive monitoring? So as long as say SPAN port is configured on the device/switch to send traffic to the the server port that the FTDv host resides on you should see t...
