Hi, I'm currently unable to connect to the standby ASA using ASDM or SSH. I can connect to the active ASA through the outside interface without any issues. However, as part of the ASA upgrade process, I need to access the standby unit via ASDM, but I...
Actually, I want to allow FTP from outside to inside, but the packet tracer display "Drop-reason: (acl-drop) Flow is denied by configured rule". I must be wrong something. I have attached my config. Any assistance would be greatly appreciated.
How do I implement the Failover license function under FPR1010-NGFW-K9? Do I need to buy a license? Or does it come with the relevant subscription?
I have a Nexus 5k with a 10k sfp configured for vlan 800 along with another port also configured for 800. This goes into an edge router which then goes into the outside interface of an asa 5545 (had to do it this way temporarily because I did not h...
Hello everybody, I have been tasked to upgrade a HA pair of two FPR-2110 running rel. 9.18(4)22. I checked the upgrade guide (see screen dump attached):https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/asa-appliance-asav.html#id_...
Hi,The recommendation for failover link between two firepower devices in active/standby setup is to be the same bandwidth as the data interface.The Firepower 1150 has only 2 x 10 Gb/s SFP+ interfaces, the rest are 1 Gb/s. When using the two 10 Gb/s a...
OK for the life of me, I cannot figure out how to route VLANs so that they have Internet access. Whether I choose Access or Trunk, I simply cannot get it to work. Online searches turned up absolutely nothing, not even the Cisco documentation could ...
We have two data centers HO and DR. We have VPN firewalls in both data centers and we are planning to purchase certificates to use for Anyconnect in these firewalls. I know that we can use SAN names in a single certificate (like ho-vpn.domain.com and...
如何在FPR1010-NGFW-K9下实现故障转移许可证功能？需要购买许可证吗？还是附带相关订阅？
Hello Guys, I am testing the active-passive failover in FTD. First of all the failover works fine for me, but I have query related to the timeouts I received during the testing. My testing process is as follows. Let’s say I have two FTDs, FTD-01 (pri...
Our ISE environment only authenticates wired connections and passes VPN authentication from our ASA firewalls on to our Active Directory. One of our VPN firewalls gets brute forced hit pretty hard. Luckily it is with attempts with usernames we don'...
I'm setting up a Cisco Firepower 2130 FTD, no FMC. This is for a lab environment.I want to be able to ping thru the Cisco Firepower 2130 from a switch on the inside interface to a switch on the outside interface and vice versa to check connectivity. ...
Hello,My Cisco FirePower 1120, does not boot due to SSD disk failure and at this point I need to replace it with a new one and I am wondering to know, how can I Perform a Complete Reimage of the new SSD disk.The ROMMON version installed is 1.0.25 and...
We have IPSEC VPN setup(HUB to Spoke), were clients access internet through VPN from Site to HUB(Data centre)I have a requirement of offloading a certain internet destinations towards internet instead of injecting through VPN tunnel, to offload it di...
I have a ASA 5585 with single slot (No IPS), Simple network, ASA Outside interface connected to Internet /Wan and Inside interface to LAN , ASA Management 0/0 is connected to LAN Access switch Management VLAN. I have allowed any any policy for man...
