Hello Dears I had evaluation licensee for FTD physical box 2100 I am managing it through FDM not FMC, and I had enable the routing (static route) but still can not ping from inside users to any of external hosts and when try to ping I got general f...
Hey guys, I had this error in my cluster FTD-2130 since a couple of days .. Please Help !
Hi, I want to check if we are hitting this bug:https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvz46333 But how can I get the FMC logs or the FTD logs?
Dear community, I want to upgrade Snort 2 to Snort 3 in a HA FTD setup. Can someone tell me the process without causing downtime? Second use case is, Upgrade of Snort in a Active/Active Setup also? Any information would highly be appreciated. Tha...
Hi,I am trying to use 1:1 Static NAT on NAT enabled device.There is a firewall behind the NAT enabled device, which will have IPSec setup.Do I need to set up NAT-T(Traversal) on the firewall in this case using 1:1 Static NAT??As far as I understand, ...
Hi guys im trying to update my ASA 5508-X to the version 7.0.0 as i need to update this so they can work the site to site vpn with a Firepower 1010 however is not able to do the update im using the system upgrade procedure and i already upgrade the ...
I have setup a site to site vpn up between a Cisco ASA 5508-x and a Cisco ISR 4531. The tunnel is showing up but I cannont ping between the tunnels. When I ping it goes out one hop and then I get the !N. here is some show commands from the ASA and R...
I'm trying to setup an etherchannel on my ASA instance (version 9.17.1) that is running on a Firepower 4112 (version 2.11(1.154). I've managed to create the etherchannel via FCM and this is being presented to the ASA okay, but I have no options to pe...
I would like to know how the vulnerability network graph works on fmc. Does it actively detect operating system vulnerabilities?
Hi CSC, Reading the following from the Firepower configuration guide (in bold) So If I had a rule within my ACP and attached a file policy matching FTP/Block Malware is this saying that unless my default action is IPS/Drop Inline then matching traf...
We were hoping to get some feedback on why a router would show ports open on the public facing interface when they are not running on the router? They are not specifically closed. Nat is configured in a manner that would not allow a connection throug...
Hello,I am facing some problems when try to I deploy from FDM. Until couple days it worked well, but now everytime I receive this error " Deployment has failed. Deployment failed for an unknown reason. Please try deploying changes again. If the probl...
Hi, for a customer i'm trying to authenticate anyconnect using an AD, but i can't get it work. On the Cisco ASA is see the following messages: Mar 23 15:02:07 [SAML] consume_assertion: The identifier of a provider is unknown to #LassoServer. To regis...
Hello,I am trying to allow web access to an inside host but for some reason it is getting blocked. Packet-tracer hits the implicit rule (deny all) and drops the call. It seems the ACL rule is not being used. Not sure what I may be missing.This is wha...
Hi Team,Greetings to you all, I have a customer with FPR 2140, Running FTD OS v6.6.5 (managed by FMCv),when I check the Cisco Software Manager,it's not showing the Serial Number of the FPR 2140/FTD, it only showing the FMCv (which is because of the F...
