Hello, we recently had our cert for our VPN expire without notification via alert message. I've done some research in the FMC but can't find anything that monitors certificate expiration dates. A google search points toward REST API's of course but t...
Forum Posts
Is it possible to run Radius with Cert and Radius only on the same interface. I have different profiles for the two. but they share the same tcp port. Need to do a POC, and it would be much easier to have user login with just Radius, not Radius and c...
HiHow do we configure AAA for the FTD in chassis mode managed via FMC?I can't seem to find any information on this? The FXOS cli doesn't appear to permit you to make any changes.But i don't see anywhere to create a Chassis AAA policy. AAA for the Ins...
We have FTD devices with ASA image in production which managed by FMC and Also we are managing firewall through ASDM. so now we are removing the FMC from production and want to manage the FTD devices locally. so is there any impact if the firewall is...
HelloWe have a Firepower 1120 device. With IPS is it possible to monitor file copying over Windows RDP?If so, can it correlate the user session to what files are copied?Thanks
HIWe have several Policy based VPNs, I have read in a Cisco document that the sysopt permit-vpn is not supported with Route based VPN and I will need to configure access control for this, so that being said does this affect our policy based VPNs whic...
Working on a pair of 2130s in HA that have the URL filtering license and there is also an SSL Policy in place. YouTube isn't blocked, but there is 1 particular video that when trying to view it you get the following error: The same URL when on a co...
Hello,Starting from the last three weeks these IP Addresses are attempting to VPN into our network. In the ISE LiveLogs we can see that there are multiple attempts from these ip addresses. These IP addresses were added to the prefilter block rule on ...
Hello,I've bee trying for a while to get my FMC to talk to remote storage so I can place my backups and reports there. For some reason my FMC refuses to talk to any remote storage device I have. NFS, SMB (haven't tried SSH), neither work. I keep get...
Hi all, We have an FMC virtual 300 that was built by mistake by our client. This is fully functional but we need to renew the license. During the licence renewal, we realised that the FMC should have been built as a standard FMC virtual and not an FM...
Hi team,were working on one use of cisco ASAv firewall on catalyst 9300 switch but while choosing the model for licensing didn't understand b/w ASAc5 (L-ASA-C-5S-K9=) and ASAv5 (L-ASA-V-5S-K9=) and please find thee attached link wich we're following....
Hi,Our Cisco ASA running on Firepower 2120 hardware are being targeted by botnet DDoS doing random unauthorized login attempts originating from TOR network exit points or infected webservers and devices all over the world. The syslog is flooded with:...
Resolved! FMC is not updating LSP
Good day everybodyOur FMC is 7.0.1 and Geo , VDB and SRU updates are received automatically and everything is fine.Except LSP which is not update automatically.Is there anything I should do?Thanks in advance
We received vulnerability mail from my security team. Could you anyone have solution for this vulnerability CVE-2023-51384 , CVE-2023-48795 , CVE-2023-51385
hello all ,recently i tried to configure VPN site to site with certificate authentication type, i got the certificate signed by a third party autority , and when i did the debugs i got this log :CRYPTO_PKI: bitValue of KEY_USAGE = a0PKI[7]: CRYPTO_PK...
