I'm using an ASA 5506-X I decided to go with a static default route in my configuration I'm not connected yet to the internet, but I assume that is not necessary for configuration.My understanding is the default static route configuration on an ASA i...
I am connected a site-to-site VPN, with one old ASA version 7.8, and one new ASA, version 8.4.I am getting very confused about how the new nomenclature relates to the old.Is ikev1 the same as isakmp in the commands? Is ikev2 like the old IPSec comma...
My configuration:crypto ikev1 enable outsidecrypto ikev1 policy 2hash shaauthentication pre-sharegroup 24lifetime 3600encryption aes 256exitaccess-list 101 permit ip 192.168.2.0 255.255.255. 0 192.168.3.0 255.255.255.0 My problem arises when I try to...
I'm trying to set up Event Manager on an ASA 5540 8.2, but it's not showing the commands, nor the initial command, does anyone know why? #event manager applet EventICMPdescription Monitoring Memory ProcessorCPU and Interface ICMP Incidentevent timer ...
Hello, We got a Cisco ASA5506-X with Firepower and all traffic is going through the firepower module. There are allot of Access Control Policies allowing and blocking sites. Now the problem is that the internet speed should be 100Mb but we are o...
Hello, I would like to know at which end the issue lies, In the attached wireshark traces, the ip address 10.92.55.255 sends SYN to 92.60.106.204 and the ip 92.60.106.204 replies with SYN ACK but then we don't see any ACK from 10.92.55.255. Can ...
Hi All I have the following topology Internet | Cisco ASA | Core Switch------------Router1----Backup Internet All my traffic goes out through Cisco ASA but I want only certain traffic (for example) telnet traffic to go through backu...
Hello, I currently have an ASA that has a default route out to a service provider (extranet with RFC1918 addresses plus some limited RIPE addresses). The network will be changing in the future and I need to swing that default route elsewhere. The...
Greetings, I am unable to ping from my wlc (built-in-wap) to my any of my firewall segments. I can get dhcp to work to assign me an ip from the range for my dhcpd but I can't get the connectivity to internet as it drops or says it should pass it i...
hello i have ASA5510 with https enabled ,i can ping from my PC but when i try to access the GUI it gives me this error: This page can’t be displayed Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting to https://192.168...
Prior to implementing blocking (FirePower ASA currently set in passive mode), I need to provide a custom block page. Ideally this would include a company logo and some text indicating why the page was blocked. The documentation is somewhat light on ...
I have this config but kids with Kali can enter in the Aironet and access admin network. What im doing wrong? Is any way of resolve issue withou more hardware? Router#sh run Building configuration... ip dhcp excluded-address 192.168.2.1 192.1...
We just cannot get Firesight to be user aware at all. I can match logon events from the DC, to the SF User Agent to traffic being processed through the SFR module, and have it either hit my unknown/Anon user rule, or be denied based on no identity. I...
Hey friends, I recently published a blog article that extensively covers Address Translation on the Cisco ASA / ASA-x Platforms (code versions 8.4+). This guide will take you from knowing nothing about configuring NAT on an ASA to being able to con...
I have configured following policy but traffic is not redirected to SFR module so that's why i couldn't monitor any traffic at FMC! i think every thing is OK if only the traffic redirects to SFR module ! Service-Policy used ==========================...
