When it comes to security, the word blacklist is always tied to something bad. However, this is not the case when we deal with health policies in Cisco FMC. FMC offers a nice feature called health monitor blacklist. This feature allows us to suppress the health alerts related to one or more FTD appliances. Not only, the health monitor blacklist…
In this post I am going to show you how to shutdown Cisco FMC. I know it might seem basic, but some of us might not came across this task before. That would be the case if you are not a 100% focus on the FMC on a day to day activities. Anyway, there are three ways to shutdown Cisco…
In this post I am going to share with you how an FMC can register an FTD that was already registered with another FMC. In my lab I had two FMCs, and one FTD. The FTD was already registered with an FMC, and it had another FMC registration in pending state. What I have tried to do was to register…
In this post I am going to show you how to delete the pending manager in FTD. The reason why we would have a pending manager in the first place would be right after we register a manager (FMC) in the FTD, but before we add that FTD to the FMC. That is basically a pre-req before we can add…
In this post I’m going to show you how to configure the pager lines in FTD. That’s to have the display screen paged rather than skipping to the end, and having to scroll back up to search for what we want. In other words, to have the show command output display to work in the same way as the traditional…
While I was trying to configure DHCP Relay on an FTD the other day, I was stuck for a while with the Error : DHCP: Interface ‘inside’ is currently configured as CLIENT… . The exact error is below, and that was happening every time I was trying to deploy the configs on the FMC: Error : DHCP: Interface ‘inside’ is currently…
In this post we will talk about the FTD Get Device Configuration and Push Device Configurations. These two options are available in FMC to allow replicating the configuration from one FTD appliance to another. The FTD Get Device Configuration allows us to replicate the configuration from a device to the device we are on. And the FTD Push Device Configurations…
When we configure a site to site VPN in FMC, on the IKE tab, we see an authentication type option to use a Preshared Automatic Key. In this post we will see what that option does for us. FMC as you know can manage multiple FTD appliances. The appliances that would be managed by the FMC do not necessarily have…
In this post we will see how to configure DHCP Relay Agent on FTD through FMC. DHCP Relay Agent would be required when our DHCP server is not located in the same broadcast domain as the DHCP clients. For instance, we might have a centralized DHCP server located in a VLAN and the clients trying to get an IP are…
This post will show you how to configure AnyConnect SSL VPN in FMC. However, it will show you a slightly different configuration comparing to the common one we mostly use. In this lab we will have a DHCP server inside our network, and that DHCP server will assign the AnyConnect clients IP addresses from the same internal range. Therefore, both…