Hi All, I'll be installing a new (single) Cisco ASA soon, and i need to connect that directly to a Active/Standby Cluster. How should i configure this on the new ASA Side? Should i create a "Redundant Interface" and connect the Active firewall to t...
Forum Posts
Hi everyone, I am wondering if there is a possibility to allow inter-interface traffic with acls without allowing all traffic on the same security level. So first disallow everything and then allow traffic with normal acls. Is it not possible by de...
Hi,I am getting crazy trying to understand and configure outside access to our customer router with Zone-Based Firewall.Until now the customer was running IOS classic firewall and I decide to configure Zone-based firewall as it will give more flexibi...
I am trying to push a Sensitive Data Detection Policy to detect email and possible passwords being entered in a URL, but whenever I deploy the policy I am given a Snort validation error. FMC 6.2.3.2 ASA with FP Module 6.2.2 Here is the RegEx - Noth...
Hello everyone Today I have a weird error during the iso transfer with a Defense Center 750. I'm making the reimage process for that firesight appliance because it had the 5.4.0 software, I start the download and mount ISO step, but the file transf...
Hello, How do I submit for a website to be unblocked or de-listed from the Cisco website malware database? This website was hacked last year, has been rebuilt from the group up, and yet Cisco thinks it's malicious. We've triple checked all logs, co...
I've created a test rule to block .study, .accountant, .party, .click, .top, .life, .yokohama, .ml TLD's I first created a URL objects and then put them in the group TLD_Top10_abused Created a test policy under users with only me with block with rese...
We have recently upgraded our firepower 8350 to 6.2.3.4 and we have started seeing high CPU instance for SNORT processes and in one of the case we hit major slowness and high traffic drop rates. We have engaged TAC - almost 3 times now and each en...
Does anyone know if it is possible to remotely turn on the power on a FMC 4000 appliance via the ILO connection? I have an open TAC case where we need to do a BIOS upgrade due to a firmware bug. According to TAC, after the firmware is installed the a...
Does anyone know a way to easily, statically NAT one /24 address to another /24 address, while keeping the host addresses the same. I was thinking something like this, but it doesn't seem to work. I'm trying to avoid configuring a static NAT transl...
Greetings All, Does Cisco have some form of software simulation that I can use for training on the ASA firewall series? Where can I download or purchase? Thanks in advance
Hi guys, I come today with some funny/tricky ACL issue. I have this classic setup: - ASA (default route to the router) <----> 4000 series ISR router - ISR router has two interfaces Gi0/0 toward ASA and Gi0/1 toward ISP - default route is install...
Hello guys, A customer bought a CISCO ASA5508-X Threat Defense and it was delivered with Firepower image but we are not going to use all of the firepower services. How can i disable all the firepower services and related stuffs here ? I just want o...
I am doing a migration from checkpoint R77 to FTD. On checkpoint inbound rules have defined public address in ACL destination which then natted to static internal addresses. In FTD when I have done the conversion it still holding those pub ip's in ...
Just starting to configure our ASA 5525X HA pair to support AnyConnect clients. We currently have several IKEv1 VPNs terminating on our outside interface so I am concerned about the impact of enabling webvpn on the outside as well... is there any ser...
