Hi guys, i have two ASA 5540 firewalls working in stack, unfortunately one of them was broke up. some power issue or something like that... my question is, i have one ASA 5545X in spare. Can i substitute the 5540 for the 5545 with no problem? tha...
I am getting the log below: Deny udp src outside:192.168.20.11/21002 dst identity:239.224.20.7/1007 by access-group "outside_access_in" The systems (192.168.20.11) sits on the outside port of the firewall and does the streaming to 239.224.20.7/100...
Hi, I need to configure an Firepower 2110 so that it has two Ouside interfaces. Offcourse, I will put an Default Gateway route on interface Outside_1 and I wil have all my traffic go this direction. But I need e.g. that my second, Outside_2, interf...
I would like to configure a VPN between an FTD appliance and another Cisco appliance, specifically an ASA and an IOS router. Usually I use VTI tunnels so I can create a tunnel per-internet connection. I'm a bit unsure on the capability of FTD at the ...
Hi I recently started to receive this auth prompt in asdm for comodo ocsp url? I changed the anyconnect certificate about 2 weeks ago, and this is the third time I've gotten the prompt. Any help? Br, Michael
Helllo , We have 2 level of firewalls at my company. We have 1 DMZ sitting on the perimeter and a cisco firepower acting as internal/core firewall. We have an exchange server that should be publicly be accessible. Where do you recommend putting t...
Hi, Recently we have migrated to FTD 4100 from ASA 5585. Our system team runs scripts on the server using the putty session to the servers these scripts runs for hours .Earlier with 5585 these ssh sessions used to work properly but after migration ...
Dear Experts,we have an ASA 5585-X (Hardware: ASA5585-SSP-40, 12288 MB RAM, CPU Xeon 5500 series 2133 MHz, 2 CPUs) used as edge firewall to protect our datacenter.The firmware version is:Cisco Adaptive Security Appliance Software Version 9.4(4)5Devic...
Hi All, I'm trying to run some nmap scans to inside subnets over AnyConnect VPN, but the results are very incosistent. Meaning: sometimes even just a basic portscan will report 0 hosts as up. 5 seconds later the same scan shows the right hosts as u...
Hi people! I have an issue, while it shows that I am connected to a network and it's having internet.I can't open pages.I suspect it's a dns issue or a routing one.I paste you my config. asa5510(config)# show conf : Saved : Written by enable_15 a...
Hi, Recently we have migrated from ASA 5585 to FTD 4110 . After migration we are facing problem with FTP and sqlnet traffic. Earlier it used to work properly but after migration some times its working and some times connection time out. We used the p...
Hello - So Im working on a bandwidth issue in our Thailand sensors and Im looking for a way to identify the last successful deployment of a policy to a sensor. Anyone have a suggestion?
I use FMC to monitor a HA pair of 2140s with FTD 6.2.3.3. I sometimes receive alerts for high CPU e.g. Health Monitor Alert from XXXX (mgmt ip of 2140 device) Time: Mon Sep 10 09:23:48 2018 UTC Severity: critical Module: CPU Usage Description: Using ...
I have an interface with an access-list bound to that interface as "in" ACL with the following line as first line of the ACL: access-list from-mpls line 1 extended deny udp host 10.255.9.2 eq syslog host 10.255.7.254 eq syslog But with packet-tracer,...
I was installing ACS 5.2 on VMware by setting all the minimum requirements but still not detecting the hard disk and showing the following error:
