Migrating firewall configurations can be a daunting task, especially when dealing with complex policies and large configurations. Cisco's Secure Firewall Migration Tool (FMT) offers a streamlined solution to migrate configurations from various firewa...
Forum Posts
I am in the process of migrating FTD 4110 configuration (version 7.0.4) to FTD 3120 (version 7.2.8) that is managed by FMC 2500 (this manages multiple FTD instances). New FMC is 2700 (version 7.4.0). FTD 3120 will be soon managed by FMC 2700 once mig...
Problem: Firewall shows it is connected to the Internet, it can sees the gateway. But, we not getting any data through. What We've Tried:Set up static and dynamic NATs, both before and after Auto NAT rules.Used various zone objects and policies (netw...
Resolved! FMC Security Intelligence - logging only
I seem to recall years ago with an older version of FMC setting up the SI so it would generate a event in the event viewer but will not block the traffic. I am needing to setup a new FW with 7.4.2 in inline routed mode and want to have the Security ...
Is it me or are nothing released regarding CVE-2025-20182https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multiprod-ikev2-dos-gPctUqv2Looked for something to patch 7.4.2 with.
After an upgrade from FTD 7.4.2.1-30 to 7.4.2.2-28 a Site to Site VPN stopped working.This is a packet trace, external 194.13.185.2 , Internal 192.168.20.23It is strange, because all phases have result "ALLOW".Except for the final punch line: Flow...
Hello to everyone.I have some doubts that arose as a result of Ethical Hacking carried out at my work, related to whether or not it is possible to stop brute force attacks on a site published from our on-premise network with FTD. Without going into t...
Hello - can FTD/FMC running snort3 collect >TLS1.2 client hello/server cert metadata collection in connection events for example? I do not want to deploy EVE and SSL decrypt is not an option. I just want to capture server cert metadata, SNI etc. Is t...
Can you tell me what FMC's /var/run/rpc.statd.pid file is doing? admin@vFMC3:/var/run$ ls -al -rw-r--r-- 1 998 997 0 Feb 7 05:36 rpc.statd.pid
Hi all,How OGS works in Cisco FTD?We were facing memory utilisation issue on FTD 3120 due to high ACE count.Cisco suggested to enable OGS.Earlier ACE count was :7905432After enabling OGS ACE count: 24905 I want to know how this OGS works and how it o...
I have an FMC 2700 on version 7.4.2.1 which is managing an FTDv running 7.2.9 and having a problem getting a site to site VPN working, it's the 5th one I've set up and the first one to this particular company (the other four have all worked fine firs...
FPR1010-ASA-K9_ASAにて、「failover」コマンドを入力すると、ERROR: Command requires failover licenseと表示される。license smartfeature tier standardfeature security-plus過去に上記コマンドを入力すると解決した事例があったため投入すると、feature security-plusを入力したタイミングでERROR: Please acquire a valid feature tie...
We also have this issue running FMC 7.6.0 which is not on the list of known issues. I've engaged with cisco TAC and they have a workaround.
Hello I upgraded CSM from 4.19 to 4.21 and I have a problem. In one of the firewalls the access rules do not load. In Cisco Security Manager it shows 50 out of 211 loaded. But it is stuck in that it does not change. Any ideas? Thanks and regards, ...
Hello! Has anyone with an FTD managed by FMC run into this issue? I am trying to upgrade the FTD os using the FMC wizard. When I go to push out the image file to the devices (2 devices as part of an HA pair) it seems to only push it out to one of the...
