Hello, I would like to know at which end the issue lies, In the attached wireshark traces, the ip address 10.92.55.255 sends SYN to 92.60.106.204 and the ip 92.60.106.204 replies with SYN ACK but then we don't see any ACK from 10.92.55.255. Can ...
Forum Posts
Hi All I have the following topology Internet | Cisco ASA | Core Switch------------Router1----Backup Internet All my traffic goes out through Cisco ASA but I want only certain traffic (for example) telnet traffic to go through backu...
Hello, I currently have an ASA that has a default route out to a service provider (extranet with RFC1918 addresses plus some limited RIPE addresses). The network will be changing in the future and I need to swing that default route elsewhere. The...
Greetings, I am unable to ping from my wlc (built-in-wap) to my any of my firewall segments. I can get dhcp to work to assign me an ip from the range for my dhcpd but I can't get the connectivity to internet as it drops or says it should pass it i...
Resolved! enable to access ASA5510 from my PC
hello i have ASA5510 with https enabled ,i can ping from my PC but when i try to access the GUI it gives me this error: This page can’t be displayed Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting to https://192.168...
Prior to implementing blocking (FirePower ASA currently set in passive mode), I need to provide a custom block page. Ideally this would include a company logo and some text indicating why the page was blocked. The documentation is somewhat light on ...
I have this config but kids with Kali can enter in the Aironet and access admin network. What im doing wrong? Is any way of resolve issue withou more hardware? Router#sh run Building configuration... ip dhcp excluded-address 192.168.2.1 192.1...
We just cannot get Firesight to be user aware at all. I can match logon events from the DC, to the SF User Agent to traffic being processed through the SFR module, and have it either hit my unknown/Anon user rule, or be denied based on no identity. I...
Hey friends, I recently published a blog article that extensively covers Address Translation on the Cisco ASA / ASA-x Platforms (code versions 8.4+). This guide will take you from knowing nothing about configuring NAT on an ASA to being able to con...
I have configured following policy but traffic is not redirected to SFR module so that's why i couldn't monitor any traffic at FMC! i think every thing is OK if only the traffic redirects to SFR module ! Service-Policy used ==========================...
I had a customer to wrote me saying that he is trying to install their updated license on their FMC and since they do not have FTD running, nothing is showing up their licensing portal. can someone please assist me on how to help this customer inst...
I am slightly new to the FMC product and I have learned to do things like policies and device administration. Now I am looking at how to see what is going on. I created a policy on a new set of ASAs/SFRs that is in "monitor" mode because I want to se...
This is an ASA 5506X running 9.8(3). I need to change the IPv6 DUID to accommodate a prefix-delegation problem with my provider and, unfortunately, I cannot find any DUID related commands. Google doesn't turn up anything helpful either. Does anyone k...
Resolved! config timout ASA to FTD
hello all, please guy , i migrate all my configuration from an ASA to new firewall cisco FTD after the migration i have an issue of the timeout connection UDP this is the command of timeout in ASA timeout conn 4:00:00 half-closed 0:10:00 udp ...
Hello Friends, I am using Cisco asa 5512 on 9.8.2. due to recent security measurement we have enabled TLS 1.2 with custom ciphers. However, SSL LAB shows there is no support for secure renegotiation. I wanted to know if asa support this feature...
