Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Resolved! Cisco FMC Support Local User Database

Hi Team, Is anyone help me out in finding the solution where when we don't have the LDAP or AD server and need to use and configure RA VPN ( anyconnect) using local user database. Till 6.2.2 it is not supported. Any current or future version is...

FTD Firewall MGMT interface Management Advice

hi Team i have FTD 4120 where MGMT interface available to manage Chassis. can i assign that MGMT interface to other onboard available interface regards, darshin

Resolved! STP disabled on edge ports that connecting to Firewall ?

My stupid question : Should I disable ( or filter ) the STP on the switch ports connecting to the ASA firewall ( some VLANs are created ) ? Thx.

site to site vpn

Whether we can configure two site to site vpn on single interface?

ASA to FTD using FDM for Management

I know you can go from ASA to FTD using the migration tool if you're going to be managing the box via an FMC, but if the current infrastructure only supports Hyper-V i think you need to use the FDM instead. Is there a way to go from ASA code to a FD...

Resolved! 1G full configuration in the interface of the ASA 5545-x

Hi, Guys, My ASA 5545-x is running 9.4.4 (5). I can not configure the ASA 5545-x interfaces, any help ? fw(config)# int gi1/3fw(config-if)# speed 1000fw(config-if)# duplex full ^ERROR: % Invalid input detected at '^' ...

Resolved! ASA 9.9 BFD issue

Hi Experts BFD feature is not working on ASA 9.9 running on FPR9300 chassis. Is it supported at all? While debugging, there is no traffic sent to peer device (SRX340). Any advice? Cheers. Sumanta .

5506-X span/port mirroring?

I am trying to do something like this for the ASA 5506-X: https://supportforums.cisco.com/t5/service-providers-documents/asr9000-xr-how-to-use-port-spanning-or-port-mirroring/ta-p/3108031 I found this, which states that port mirroring is possible o...

Resolved! Restrict some VPN users FMC / Active DIrectory

Hi I have two groups in my AD, one for our Administrators and one for our Users. I want to configure so that everyone can use our VPN connection but I want to restrict so normal users in the Users group can only access one IP-address and our Admini...

How to fine-tune the ASA interface configuration to minimize packet drop

Hi, guys, I got the question: One of the ASA interface ( 1G fiber ): fwcore/sec/act# sh int gi1/0Interface GigabitEthernet1/0 "users", is up, line protocol is up Hardware is i82576F rev01, BW 1000 Mbps, DLY 1000 usec (Full-duplex), 1000 Mbps(1000 ...

ASA - NTP client behind NAT looks like DDoS amplifier

Hi all! I am facing strange behavior with NTP client behind NAT. Using network scanners I saw that NTP client sitting behind NAT can be NTP amplifier. I used nmap and several other tools, results are the same: d@d:~/Downloads$ sudo nmap -sU -pU:123...

How to get License number

Hello, We have ordered the following items from re-seller ASA 5525-X with FirePOWER Services, 8GE, AC, 3DES/AES, SSDASA5525-FPWR-K93YR SNTC 8X5XNBD ASA 5525-X with FirePOWER Services, 8GECON-3SNT-A25FPK9Cisco FirePOWER Software v6.2 for ASA 5500-XSF-...

ASA5516 - Forward HTTP/HTTPS from specific hosts to Another ASA

So.. I have an interesting scenario. We currently have a proxy server (siteA) that we are going to sunset that has caused us more problems than it's fixed. Most of our access network traffic is coming from SiteB that is completely unmetered. We ...

Firepower sensor update from 6.1.0.1 to 6.2.3-88

Hi guys, I have 4 sensors on 4x ASA 5525-X all managed by FMC 6.2.3.2 (build 42) I have couple questions: - all ASA policy-map use fail-open config; SNORT process restart guide says there should be no traffic disruption, still I read on some blog...

ASA 5545-x boot only from Tftp

Any assistance here would be greatly appreciated! I have an issue with my ASA 5545-x, it refused to boot from flash. I have backup, formatted the Flash, use Rommon to boot via TFTP and it boot fine and the old configuration work. I copied the image ...

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

Resolved! Cisco FMC Support Local User Database

FTD Firewall MGMT interface Management Advice

Resolved! STP disabled on edge ports that connecting to Firewall ?

site to site vpn

ASA to FTD using FDM for Management

Resolved! 1G full configuration in the interface of the ASA 5545-x

Resolved! ASA 9.9 BFD issue

5506-X span/port mirroring?

Resolved! Restrict some VPN users FMC / Active DIrectory

How to fine-tune the ASA interface configuration to minimize packet drop

ASA - NTP client behind NAT looks like DDoS amplifier

How to get License number

ASA5516 - Forward HTTP/HTTPS from specific hosts to Another ASA

Firepower sensor update from 6.1.0.1 to 6.2.3-88

ASA 5545-x boot only from Tftp

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Problem with ssl decrypt-resign on Cisco Sefure Firewall

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

Cisco FTD workaround for SSE connector failure stumbled on rights priv

Assigning an EtherChannel Subinterface to an Instance via FMC API

Firepower 1010 readiness check stuck at "Please Wait"

OpenSSH regreSSHion vulnerability in FMC

Hyper-V VHD image for FMC virtual

Cisco Packet Tracer ASA 5506 Prevents Access to DMZ Servers

Firepower 7.42 issue interface Management0 has no link