After upgrading ASA to version 9.18.4 we are seeing Azure Traffic Manager probes being dropped (or discarded). In the logs we see 'TCP access denied by ACL from <traffic manager IP> to Outside Interface /443' It works fine when reverting back to 9.16...
Forum Posts
Resolved! Port security
Dears our CTO wants the whole company mac address to be added in a port security so that nobody outside the company can access our network, is there any alternative solution for adding all the mac addresses manually.
hi,i had a strange issue yesterday where i upgraded an ASA 5555-x active-standby pair to 9.8.4.20 to a patch a recent cisco vulnerability.both FW got stuck on HA state as 'active' and encountered an 'HA state progression failed'. i did the secondary ...
hi Cisco,I am using below topology in my lab where ASA in multiple context - C1 and C2 sharing the same physical interface, in different VLANs (sub interface) is not able to establish EIGRP neighborship with 2 cisco routers (point to point). Although...
Hi,Can we generate any report (Events,Session) in FDM like FMC? We have applied Intrusion and Malware policy. And it's a good that it is blocking. But from the event log of any 'Block' action we can see only Initiator IP and Responder IP but there is...
Hi,I'll have two Firepower FPR1120-ASA-K9 that will be configured as High Availability (Active and Standby).Please let me know if they should have the same management IP address and bridged network address.Thank you in advance!Regards,Sangyeon
Resolved! Firepower Patch
HiCan someone tell me is the fixed version for the recent Arcane Vunerability FMC/FTD 7.0.6-236 or 7.0.6.2-65 we ar running 7.0.5 currently I dont understand the document.?? Thanks
got to upgrade to 7.0.6.2, currently running FTD on 7.0.5.do I need to upgrade to 7.0.6, then apply the 7.0.6.2 patch to 7.0.6.Or will the currently 7.0.6.2 bring my 7.0.5 directly to 7.0.6.2?
We are planning to upgrade our cisco ASA with 9.12x and regarding services we have HA, VPN, NAT I have read that ASA 9.12(x) was the final version for the ASA 5512-X, 5515-X, 5585-X, and ASASM, so for ASA 5545 better go with 9.14? Both versions ar...
Hi We have to configure a RB VPN and am wondering if I add the new VTI Interface to The exsisting outside security group or do I have to create a new security group, the outsdide Security group has the Internet facing Interfaces in it.??Thanks
Our ASA image upgrade failed and FPR1140 console prompt showed:firepower-1140-failedWorking with Cisco TAC, it was mentioned this was caused by a full directory. Note, below issue was found on two more hardware FPR1140s.TAC stated this does not occur...
Hello Experts,I set up a Cisco Cyber Vision step by step today, and its SBS version is 3.2.0. I can ping to this machine from my laptop, but I can not access and finish the remain steps via browser, neither http or https works.what I can do to figure...
Hi I have an access control rule that permits traffic from server to another server via tcp/5000 and an intrusion policy is applied to this rule.there is one intrusion rule hitting where the rule definition has in the destination ports different port...
Hello all,Recently there is a request from my user to use a software "Sonobus" that can allow other users to join together to share their audio recording. This looks like to be the peer-to-peer UDP traffic. Sonobus I decided to go ahead for testing i...
Does anyone know if any cisco ASA version supports Micro-BFD (RFC 7130) ?I'm having a hard time finding it in the documentation so probably not.maybe in an upcoming release?
