About Rob Ingram

Rob Ingram · 03-03-2024

Any ThousandEyes training or certifications planned?

Rob Ingram · 06-30-2025

@Vishal6 as long as the FTD can route to the internet to the cdFMC then yes. So you'd need to configure the Meraki to NAT and permit the relevant traffic.

Rob Ingram · 06-30-2025

@Vishal6 if using cdFMC the FTD must have internet access from one of it's interfaces. Could you connect the mgmt interface to the internet, just to access cdFMC networks?

Rob Ingram · 06-30-2025

@lmgomes you can use the loopback interface for L2L IPSec VPN. https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/770/management-center-device-config-77/vpn-s2s.html "Choose the tunnel source interface from...

Rob Ingram · 06-27-2025

@dpditstaff You cannot natively configure the control plane ACL using the CLI on the FTD. Typically you would use FlexConfig, you can paste the ASA CLI commands. Example:- https://integratingit.wordpress.com/2021/06/26/ftd-control-plane-acl/

Rob Ingram · 06-26-2025

@Antonio Macia if not tried this, but.... If the standby management center is behind NAT, complete the following steps to edit the hostname of the standby management center: Access the threat defense shell and use the show managers command to g...

Member Since	‎12-05-2010 06:35 AM
Date Last Visited	‎06-24-2025 12:12 AM
Posts	10,711
Total Helpful Votes Received	17183

User Statistics

User Activity

Any ThousandEyes training or certifications planned?

Re: Cdo manage Ftd

Re: Cdo manage Ftd

Re: Cisco FTD HA Pair + FMC - Two ISP links with BGP - Architecture

Re: Build ACL in FMC

Re: FTD registration to FMC HA behind NAT