Firewall 4200 Series v7.4.2.1-30; vPC ACI port-channel suspended issue Hello, Have anyone successfully clustered 4200 Series FTD OS v7.4.2.1-30 on a ACI Leaf switch pair using vPC? I keep getting the switch port suspended causing the FTD cluster to ...
Forum Posts
I’m currently working with an FTD 2110 firewall running version 7.0.6, which is managed by an FMC 2500 also on version 7.0.6.2. I've been tasked with migrating the FTD to a different FMC.I came across this document outlining the migration process.- h...
Currently we have an ASA and use Secure Client 5.1.8.105 and two profiles using Alia that authenticate via 2FA. To get the correct profile, split tunnel or full tunnel a use tacks the alias on to the URL and then connects, authenticates full 2FA and ...
Problem: Firewall shows it is connected to the Internet, it can sees the gateway. But, we not getting any data through. What We've Tried:Set up static and dynamic NATs, both before and after Auto NAT rules.Used various zone objects and policies (netw...
Hello,We have a pair of Cisco ASA 5525-X and would like to migrate them to Cisco FPR-1140's.I started the migration and ended up at this screen: My intention was to set up a virtual FMC but I am not sure what version would satisfy my ASA units.Furthe...
Is it me or are nothing released regarding CVE-2025-20182https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multiprod-ikev2-dos-gPctUqv2Looked for something to patch 7.4.2 with.
After an upgrade from FTD 7.4.2.1-30 to 7.4.2.2-28 a Site to Site VPN stopped working.This is a packet trace, external 194.13.185.2 , Internal 192.168.20.23It is strange, because all phases have result "ALLOW".Except for the final punch line: Flow...
Hello to everyone.I have some doubts that arose as a result of Ethical Hacking carried out at my work, related to whether or not it is possible to stop brute force attacks on a site published from our on-premise network with FTD. Without going into t...
Hello - can FTD/FMC running snort3 collect >TLS1.2 client hello/server cert metadata collection in connection events for example? I do not want to deploy EVE and SSL decrypt is not an option. I just want to capture server cert metadata, SNI etc. Is t...
I am needing to open up a port that will go from outside to inside for TACACS authentication. I have created what i beleive is the necessary NAT translation from an available public IP address that our provider has given us in a publicly routable bl...
Can you tell me what FMC's /var/run/rpc.statd.pid file is doing? admin@vFMC3:/var/run$ ls -al -rw-r--r-- 1 998 997 0 Feb 7 05:36 rpc.statd.pid
I am in the process of migrating FTD 4110 configuration (version 7.0.4) to FTD 3120 (version 7.2.8) that is managed by FMC 2500 (this manages multiple FTD instances). New FMC is 2700 (version 7.4.0). FTD 3120 will be soon managed by FMC 2700 once mig...
Hi all,How OGS works in Cisco FTD?We were facing memory utilisation issue on FTD 3120 due to high ACE count.Cisco suggested to enable OGS.Earlier ACE count was :7905432After enabling OGS ACE count: 24905 I want to know how this OGS works and how it o...
I have an FMC 2700 on version 7.4.2.1 which is managing an FTDv running 7.2.9 and having a problem getting a site to site VPN working, it's the 5th one I've set up and the first one to this particular company (the other four have all worked fine firs...
FPR1010-ASA-K9_ASAにて、「failover」コマンドを入力すると、ERROR: Command requires failover licenseと表示される。license smartfeature tier standardfeature security-plus過去に上記コマンドを入力すると解決した事例があったため投入すると、feature security-plusを入力したタイミングでERROR: Please acquire a valid feature tie...
