Assume you have a FTD/ASA HA with combined failover/state link and no IP addresses configured on any interface. What happens when Failover link turns down? I think the active/standby roles remain on each device. But what happens when active device ge...
Forum Posts
I've got an ASA 5506-X with some the following commands on it from a previous administrator: crypto ipsec security-association lifetime seconds 3600crypto ipsec security-association lifetime kilobytes 102400000crypto ipsec security-association pmtu-a...
So I'm working on moving our citrix enviroment to our new building. However once changing all the ip's and updating the access list rules, it wasn't working. Doing the sh logging command, I see the following blocking the citrix traffic on port 8080: ...
Hi all! I think my question is pretty simple, but i haven't done this before, and ASA in GNS3 still has some bugs so i'm having a hard time trying to emulate this. Consider the following configuration: So Gi0/6 between the Active and the Sta...
I have an ASA 5545 and we just upgraded to version 9.6(4)12 to fix a vulnerability PCI scan back in July that is done quarterly by a financial institution. The failed vulnerability reads: 316187 - Cisco Adaptive Security Appliance Remote Code Execut...
Dear All, I have configured my FTD 6.2.3 through FDM with base, threat and malware license and all the policies are working fine. But today when i open the FDM it says license are out of compliance what causing the issue.??? please help.....
Hi, In FMC, you can go to Overview --> Connections Summary --> Traffic TAB and there you will see traffic by initiator IP. I would like to get this table but then for a specific IP subnet. I tried to add new search objects under Analysis --> Sea...
Hi, Note: posted elsewhere in another thread. I'm trying to use a searchable syslog server to track the flows on one of my ASAs but have run into a problem. Hypothetically, let's say I have a web server behind an ASA with IP address 192.168.1.1 ...
Hi, I'm working to replace my current ASA5512-X with Firepower services with Firepower 2110 series, and I have Cisco Anyconnect license and Firepower subscription for three years can these be transferred? Or I have to purchase again?
We have an ASA 5506-X at a remote site. A few days ago we noticed from out monitoring (PRTG) that the HTTPS/SSL sensors had failed. Then we found that we were unable to get onto the ASA via HTTPS/ASDM. PRTG is telling us "Failed to establish secure c...
Hi everyone this the first time for me to configure ASA5506-X in cli andi want to configure EZVPN client mode in this device i have 2 questions: 1- when i did (sh running configuration & sh crypto ca certificates )why i couldn't find any certificati...
Hello Everyone, I'm planning an ASA hardware migration from a ASA 5510-K8 v9.1(7)23, ADSM v7.5(2)153 to a ASA 5516-FPWR-K9 v9.8(2), ADSM v7.8(2), FirePOWER v6.2.2-81. I'm pretty new to the ASAs and I would like to get your help/advise for a migrati...
Resolved! Default Routs for ASA Firewall
Question on Default Routes:I have an ASA 5506-X connected to an inside LAN network, and the outside interface will be connected to an ISP.For the default route, should it be the ISP's next hop that I point to? For example:route outside 0 0 x.x.x.xWh...
Hello All, Is there any way that I can Limit administrative access to specific FTDs/ASAs through FMC for a specific user ? Lets say I have 10 Sensors in the FMC but I want to give access to only 1 specific Sensor to a user to administer. Subru...
Hi, Today I noticed that Firepower sometimes working and sometimes it doesnt record any logs for connection events!!for example today I checked connection events from 07:00 AM to 09:00 and I can see the logs started only from 08:49 AM I have upgraded...
