Hi folks!We have purchased a used Cisco PIX 515E firewall that I am trying to configure. It was originally password protected, but I have used the password reset utility supplied by Cisco to clear the password and have formatted the flash. I am n...
Forum Posts
Hi All, Can we apply 2 different Qos rules for the same flow. One on the ingress interface and other on the egress interface. I need to limit one drive traffic to X mbps and out of that each user should be limited to Y mbps.
Hello. We have now two asa 5525 in a ha active/pasive cluster. We are using 2 gigabit interfaces forming an etherchannel for the data traffic, 1 interface for the failover traffic and the management 0/0 interface for the firewall management. Now we h...
Hello I want to confirm if this deployment would work or not. We would have a asa firewall (external) conected to the internet router. The link between the internet routers and the asa would use a public ip address range. And another asa (vpn) con...
Hi, I am trying to get the AnyConnet VPN client device's hostname in ISE. DHCP profiling probe is enabled on ISE and works for LAN devices. AnyConnect is 4.6 version. The headend firewall is FTD 2110, 6.2.3. ISE is running 2.4 patch 5. The VPN...
Resolved! Cisco ASA 5510 replacment
I have Cisco ASA 5510 that we are looking to replace. We would like to replace it with another Cisco Appliance. My Question is 2 parts. Part 1 I am not extremely familiar with the Cisco line of products. The main requirements are VPN and we have 2 ...
How are you handling service allowance where wildcard domains are the only firewall configuration provided? Specifically I am looking at a server that needs access to Microsoft PowerBI services. I have attached the documentation provided by Microso...
Hello unable to access internet, packet tracer from inside to STC shows that packets allowed but still can not access internet. hereinafter ASA configuration. ISP router connected to interface 0/2. interface GigabitEthernet0/0 description ** LAN I...
Hi Community, I am stuck in here as, VPN is successfully established between DC & Site1 but traffic (icmp or any other) is not flowing. Kindly help. Below are the two site IKV1 configuration. Site 1: object-group network Datacenter_nwnetwork-object 1...
hi, Anyone know if there's a official hardening guide for Cisco Firepower 4100 series platform ? I only manage to find guide for ASA Firewall http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/200150-Cisco-...
12 years as a firewall guy... and this is a first for me.I have a request to allow firewall access to an app that apparently uses tcp port 0. I thought it didn't exist... but good-ol' google proved that wrong. I did find this comment: " Port 0 is ...
Resolved! How to forward port 443 through FTD 2120
I have 2 FTD 2120 Firewall with HA. I manage these by FMC. I need to port forward to my web server IP. For example: In my Firewall WAN there is IP Gi 0/1: 1.1.1.1 & 1.1.1.2. Routable Public IP Gi 0/2: 2.2.2.1/29 LAN IP Gi 0/3 : 10.10.10.10 Can anyo...
HelloI have 802.1x configured on my Cat 3560 switch stack. For the most part everything works fine but I keep running into users who have printers that go into sleep mode and then the port reverts to a dead default vlan99. When the user goes to print...
I am considering re-flashing my ASA5506 from ASA to FTD. I am reading that there is a license required for Remote Access VPN operation, but all documents mention SSL (or "Anyconnect"). Right now using the "traditional" ASA OS, my ASA has no problem r...
Does the aaa commands/configuration copy to standby firewall? I can't seem to get to my secondary ASA. Message Text Failed-Attempt: Session Authorization encountered an error Failure Reason 15020 Could not find selected Shell Profiles Resolution Ad...
