I'm not super comfortable with ASA, most of my jobs have had me translating ASA into juniper/palo so I'm OK with the care and feeding but less OK with new config. I was asked to isolate a handful of servers that are used as "jumpboxes" to our COLO....
Forum Posts
Hi, We want to deploy Cisco Firepower 4110 NGFW Appliance as a Multi context mode with 6 number of virtual context. Now my query is that, can we deploy 3 number context at router mode & other 3 number context in transparent mode ? also if possible pl...
Hello, I hope I have the correct board for this question. I have what I hope to be a simple question. My question is how does the FTD appliances, such as the 2130, handle return traffic for a given rule for an access control policy? For instance...
Resolved! FPR2120-ASA-K9 failover configuration
Hi All,I have FPR2120-ASA license and with this software:1. Cisco Adaptive Security Appliance Software Version 9.8(2) 2. Device Manager Version 7.8(2) i am new in security section my questions are:1. how to configure fail over between two ASAs?2. wha...
Hi friends, I am facing issue with port forwarding from outside to inside. we have LDAP server on the inside interface, we want to allow LDAP traffic to pass through outside to inside, after we applied below configuration still we cannot access LDAP ...
Hi Can anyone help me find out how to open the .sfo file which is downloaded when i do the export for ACL policy for a firewall from the firepower.
we are going to implement an ACI in our DC and there was a discussion about are we going to use the firewall as our gateway or design multiple VRF and the routing will be through the ACI and only use the FW whenever require.So, what is the best and m...
HiI have an ASA 5508 and CLI access.I am trying to connect using ASDM Launcher ,but not workingI tried this on Mac and Win10 using different browsers and different JRE versions, result is the same.asa981-lfbff-k8.SPAasdm-781.bin Could you please help...
I have a few Access Rules where I want to apply a file policy for hits on specific applications.When I try that, I get the following Rule Warning:"File policy rule targeting application protocol "Any" may never be triggered due to Application selecti...
Is there a tool or a way to consolidate FMC security policy ie export the policy delete or combine the rules and import it back to FMC
Hello All, Is a botnet license renewal ( L-ASA5505-BOT-1YR= ) still available for an (older) ASA 5505, Software Version 9.2(3)4 , now there is also the FirePOWER solution ? Can't find any end-of-sales bulletin for the botnet license. So SIO is stil...
I was curious if there is a section in firesight where it could be programmed to block hosts like the CISCO IPS host blocks section? Kind of like the list of hosts blocked for triggering signatures. Trying to translate this into the new product. Also...
Hello, We've an ASA running on a FPR-2110 with a single Site-To-Site VPN. We need to create redundancy by adding another ASA/FPR-2110. What's the best way to accomplish this? Thanks in advance, ~zK
Resolved! disabling TLSv1.0 on ASA5505
I have an ASA5505 that is failing a PCI DSS Scan because it uses TLS1.0 Is there any way to disable this protocol?
