About atsukane

atsukane · 03-25-2024

Hi All,I'm trying to allow traceroute through the firewall as per the below doc, however, when I update the Platform Settings to permit traceroute on Inside, Outside and another zone, SLA monitor which is tracking the primary ISP goes down and failov...

atsukane · 03-13-2024

Hi team,We are currently running ThousandEyes POV.Since our FTD is not allowing traceroute through it, the path visualisation part is not showing the correct path. We have 2 BGP peers to SaaS with ECMP, but FTD is not allowing traceroute it looks lik...

atsukane · 01-30-2024

HI All,We have had an incident today that one of the objects are suddenly blacklisted and traffic getting dropped by snort, even though our intrusion policy is not inline and doing IDS. I've looked at global block list in the SI objects, but not list...

atsukane · 01-29-2024

Hi All,,We've just enabled ECMP with two 1Gbps AWS direct connect links over the weekend.The ECMP zone is created in the global routing table, we didn't use VRF, and added equal cost static routes destined to AWS networks in the global routing table....

atsukane · 01-05-2024

Hi there,Happy New Year to you all.We started receiving MAC level error notifications from AWS.We have a single fibre direct connect presented to a Cat9300 switch, this is split and connected to FTD-2140 active/standby HA pair.I don't see any errors ...

atsukane · 04-26-2024

Having the same issue, and just wanted to say no, you are not the only one!And Cisco's suggested workaround is Don't use 8.10. what a joke, FFS indeed!

atsukane · 03-25-2024

Thanks, I'll try that.I've since found this link as well FTD allow ICMP/traceroute – integrating IT (wordpress.com) which seems to involve more than the Cisco doc, but from the URL it looks like this was written back in 2019 so not all steps stated h...

atsukane · 03-25-2024

hi, yes, the FTDs are FMC managed.

atsukane · 03-13-2024

Perfect, thank you!

atsukane · 03-13-2024

thanks @Rob Ingram apologies for a primitive question, but when you say source/s, would that be restricting interface/zone using service policy/platform settings, or restricting network/host using access control policy?

Member Since	‎05-03-2016 04:05 AM
Date Last Visited	‎04-26-2024 12:40 PM
Posts	138
Total Helpful Votes Received	73

User Statistics

User Activity

Traceroute through FTD vs SLA monitor

Enabling traceroute through FTD managed by FMC for ThousandEyes

Drop-reason: (ssl-preproc) Blocked or blacklisted by the SSL preproces

ECMP behaviour on FMC managed FTD 7.2.4

Checking input/output/CRC errors on FTD interfaces

Re: Am I the only one that missed why "reset system both in ....&

Re: Traceroute through FTD vs SLA monitor

Re: Traceroute through FTD vs SLA monitor

Re: Enabling traceroute through FTD managed by FMC for ThousandEyes

Re: Enabling traceroute through FTD managed by FMC for ThousandEyes