Hi All We have been having continuous issues with the Firepower 1120 firewalls at one of our sites.Basically when we see the above error in the logs it takes anywhere from a few days to a few weeks before the anyconnect services fail - forcing us to...
Forum Posts
I need to extract the rules which can be disabled on my firewall.Additionally number of rules which has been put to regulate traffic flow between each existing region from last one year.Can anyone help me with the information or any link with which I...
Hi everyone I have a Cisco ASA 5508-x with Cisco Firepower Threat Defense to configure. I've found on the internet that by default Firepower Device Manager is the main admin configuration interface. I wanted to access Cisco ASA CLI and maybe the web ...
Hello All, I need to establish the BGP neighborship from Cisco Routers to ASA 5525 firewalls which are in HA Active-Standby. The security team manages the firewalls as usual and I'm researching the design option. My question is do routers and ASAs ha...
Our FMC manages 4 ASAs in routing mode. Reading the upgrade guide and watching YouTube videos leads me to believe "nothing" happens to traffic flow during the FMC upgrade. I just want to run the question by the seasoned folks in the trenches before b...
hi,was trying to google search but can't seem to find the answer.just wondering what's the difference between aaa authorization exec authentication-server vs aaa authorization exec authentication-server auto-enable?i know the latter since we're using...
After updating an ASA5545 with IPv6 functionality enabled to version 9.12(3)12 (coming from 9.8(2)28) we get the warning:"Warning: duplicate link-local address: xxxdetected on interface abc. IPV6 function is stalled. You need to shutdownand then unsh...
Hi, I am creating reports on FMC but cant see any data showing when reports generated. Am I missing anything, All the access rules have logging enabled.
Hi ASA Experts， I have two ASA 5516-x working with a transparent failover mode. Both Asa can work well. I have setup the local management port IP and sfr module's IP in the same subnet. Both sides Ping are successful. But I cannot find the sfr module...
Hi,Currently, I am using Cisco Firepower 2110 with Virtual FMC version 6.3.0.2The issue is whenever I want to update my policy and hit deploy the attached error occurs and to avoid this issue I removed the IPS/Malware policies in the access control l...
Resolved! FTD and Management
I need a few clarifications a) I need to provide two Cisco Firepower 2100 Series in a HA par to customer and customer already has Firesight at his data center. I need to demonstrate this two firewalls first at my place without Firesight. Is it possib...
Using the Cisco FirePower 2100 to manage the ASA, not through the FMC. AnyConnect is already deployed for the correct amount of users but they know how AnyConnect Apex licensing. How is Smart Licensing for Apex deployed on the Firepower 2100? I've lo...
Hi Cisco FW experts, We are working for ASA5525-X deployment. we have setup 2x ASA5525-x as a cluster and both can work well.But, the dashborad page in ASDM is always incorrectly. It seems ASA disconnect the link with ASDM.I upload screenshot there. ...
Resolved! ASA 5505 ROMMON after erase flash
I was trying to erase some bad test configs on my 5505 with a write erase, but all VLAN and Ethernet configs remained. I hastily decided to do an erase flash. No I'm stuck at a ROMMON prompt with no image found to boot I'm hoping I don't have to TF...
I noticed numerous amount of CLDAP traffic to one of my DC starting 3/17/20. The device is a Firepower 1010 running FTD 6.5.0.4. The FTD has no open ports and only two NAT rules. One rule for a site to site VPN and the other rule for devices fro...
