I have 2 FTD 2120 Firewall with HA. I manage these by FMC. I need to port forward to my web server IP. For example: In my Firewall WAN there is IP Gi 0/1: 1.1.1.1 & 1.1.1.2. Routable Public IP Gi 0/2: 2.2.2.1/29 LAN IP Gi 0/3 : 10.10.10.10 Can anyo...
HelloI have 802.1x configured on my Cat 3560 switch stack. For the most part everything works fine but I keep running into users who have printers that go into sleep mode and then the port reverts to a dead default vlan99. When the user goes to print...
I am considering re-flashing my ASA5506 from ASA to FTD. I am reading that there is a license required for Remote Access VPN operation, but all documents mention SSL (or "Anyconnect"). Right now using the "traditional" ASA OS, my ASA has no problem r...
Does the aaa commands/configuration copy to standby firewall? I can't seem to get to my secondary ASA. Message Text Failed-Attempt: Session Authorization encountered an error Failure Reason 15020 Could not find selected Shell Profiles Resolution Ad...
Hi, I am moving some rules from a checkpoint firewall (r77.30) to an new ASA pair (9.8(2)28 one of the rules I have seen has 2 internal hosts sharing the same external IP on the same ports. is there anyway to do this on the cisco? e.g. outsid...
Hi all, I've searched the internet high and low and cant find a definite answer to this one. With the old ASA's with the firepower modules is CTR+PROTECT licenses enough for the IPS to work and generate IPS events in the event viewer (adsm) or FMC? ...
So i am trying to connect a virtual PC into GNS3 ASAV using any connect. Typically Anyconnect is never a problem for me, but now when I try to connect, it goes through all the motions. It asked me do I want to accept the self signed certificate and...
Hello, I have an ASA5525 running 9.6.3 code and ASDM 7.8.(2) 151 When browsing to: "Configuration > Remote Access VPN > Advanced > SSL Settings" the error code i receive: "The Forced Certification Authentication Timeout cannot be empty" wh...
Sorry for my noob question, i have a config below from 8.2 access-list NO-NAT extended permit ip 10.0.0.0 255.0.0.0 10.172.8.224 255.255.255.224 nat (inside) 0 access-list NO-NAT FW# packet-tracer input inside tcp 10.3.3.3 443 10.172.8.224 $...
Is there a way to configure a ASA5555x FTD, managed by FMC with a ether channel to have a 3 Gig pipe for internet traffic ? Model Cisco Firepower Management Center for VMWare Serial Number None Software Version 6.2.3.7 (build 51) OS Cisco Fire Linux ...
Hi All, For User-IP mapping on FMC. how frequent is the update of a new mapping sent to the sensor by the FMC?
Hello i can't manage ASA through ASDM i applied configuration as below: hhtp server emable http 0.0.0.0 0.0.0.0 inside ssl encryption 3des-sha1 aes128-sha1 rc4-sha1 ASA 5540 version 8.0(4) and My laptop window 10 i need to know which java version...
Hi, using a couple of ASA 5506 in an active/standby cluster, the primary unit (Active) reply to ping and snmpwalk request from a remote PC, but the secondary unit (Standby ready) do reply to the ping but fail to reply to the snmpwalk request. I f...
I am trying to do a lab on a FTD emulator (FDM) to FMC system but I am having a problem where the system cannot connect to the internet from the outside port (I have a real system and can do it that's normal).I tried to leave the outside port as dhcp...
hi all, Is the firewall ASA version 9.8 gigabit interface port number is change to starting from gigabit 1/1...gi1/8 instead of last time start from number gi1/0? thank you.
