I've got an ASA 5506-X with some the following commands on it from a previous administrator: crypto ipsec security-association lifetime seconds 3600crypto ipsec security-association lifetime kilobytes 102400000crypto ipsec security-association pmtu-a...
Forum Posts
So I'm working on moving our citrix enviroment to our new building. However once changing all the ip's and updating the access list rules, it wasn't working. Doing the sh logging command, I see the following blocking the citrix traffic on port 8080: ...
Hi all! I think my question is pretty simple, but i haven't done this before, and ASA in GNS3 still has some bugs so i'm having a hard time trying to emulate this. Consider the following configuration: So Gi0/6 between the Active and the Sta...
I have an ASA 5545 and we just upgraded to version 9.6(4)12 to fix a vulnerability PCI scan back in July that is done quarterly by a financial institution. The failed vulnerability reads: 316187 - Cisco Adaptive Security Appliance Remote Code Execut...
Dear All, I have configured my FTD 6.2.3 through FDM with base, threat and malware license and all the policies are working fine. But today when i open the FDM it says license are out of compliance what causing the issue.??? please help.....
Hi, In FMC, you can go to Overview --> Connections Summary --> Traffic TAB and there you will see traffic by initiator IP. I would like to get this table but then for a specific IP subnet. I tried to add new search objects under Analysis --> Sea...
Hi, Note: posted elsewhere in another thread. I'm trying to use a searchable syslog server to track the flows on one of my ASAs but have run into a problem. Hypothetically, let's say I have a web server behind an ASA with IP address 192.168.1.1 ...
Hi, I'm working to replace my current ASA5512-X with Firepower services with Firepower 2110 series, and I have Cisco Anyconnect license and Firepower subscription for three years can these be transferred? Or I have to purchase again?
We have an ASA 5506-X at a remote site. A few days ago we noticed from out monitoring (PRTG) that the HTTPS/SSL sensors had failed. Then we found that we were unable to get onto the ASA via HTTPS/ASDM. PRTG is telling us "Failed to establish secure c...
Hi everyone this the first time for me to configure ASA5506-X in cli andi want to configure EZVPN client mode in this device i have 2 questions: 1- when i did (sh running configuration & sh crypto ca certificates )why i couldn't find any certificati...
Hello Everyone, I'm planning an ASA hardware migration from a ASA 5510-K8 v9.1(7)23, ADSM v7.5(2)153 to a ASA 5516-FPWR-K9 v9.8(2), ADSM v7.8(2), FirePOWER v6.2.2-81. I'm pretty new to the ASAs and I would like to get your help/advise for a migrati...
Resolved! Default Routs for ASA Firewall
Question on Default Routes:I have an ASA 5506-X connected to an inside LAN network, and the outside interface will be connected to an ISP.For the default route, should it be the ISP's next hop that I point to? For example:route outside 0 0 x.x.x.xWh...
Hello All, Is there any way that I can Limit administrative access to specific FTDs/ASAs through FMC for a specific user ? Lets say I have 10 Sensors in the FMC but I want to give access to only 1 specific Sensor to a user to administer. Subru...
Hi, Today I noticed that Firepower sometimes working and sometimes it doesnt record any logs for connection events!!for example today I checked connection events from 07:00 AM to 09:00 and I can see the logs started only from 08:49 AM I have upgraded...
Hello Team We have an ASA running FTD 6.2.3 and managed via FDM . Recently i installed the SRU, VDB and GEO updates manually via the Firepower CLI of the firewall. The install of each .sh file completed successfully. I have also verified in the /va...
