Hi Sir: When I want to integrated with public cloud. I can't link to public cloud. I had tried to ping below server. But I just can ping to one server. I had confimed with FW. The policy from inside to outside is permit all. Could you help to fin...
Forum Posts
Resolved! ASA Port Forwarding - 8.3
Good morning all, I'm trying to create a rule on my ASA that will allow the outside to a www on the inside of my network but not having much luck 4Dec 15 201811:06:15106023213.205.192.2133112192.168.6.24580Deny tcp src outside:213.205.192.xx/33112 ds...
Hi, Have been trying to find a replacement for client's 5510. I found 5506-X and based on the data sheet I think that will do the job just fine. There is one location only and the device will be used as a firewall and VPN device for remote users. I...
Hello, I am working on deployment of FMC 1000 appliances in HA for management of FTD appliances. The FMC 1000 has 2 mgmt interfaces. I was trying to figure out if the two interfaces can be configured in a active standby teaming and connect the ap...
Hello all. I'm trying to configure an IPS inline pair between an ASA and Nexus switch. The ASA is currently port-channeled down to the Nexus and I want to implement the Firepower 2130 inline in between them. Is it possible to configure and 2 ether-...
Resolved! Network Discovery Rules
Hi All, I have setup a Network Discovery policy to discovery users, host and application for my internal network address range only. Do I now need to create a monitor rule in my ACP for Network Discovery to work correctly, such as permitting all IP t...
Hello All,I am new to this forum & I'm hoping someone can assist me. I'm desperate! I'm a novice when it comes to firewalls & my current Cisco ASA 5510 was set up by someone else before I started this new position. We are using the Cisco ASDM 7.6 sof...
Hola Amigos!Quisiera saber si es posible realizar bloqueos de página con el Cisco ASA 5505. He intentado algunas opciones pero aun no tengo suerte.Muchas gracias por todo.Saludos cordiales.
I am having an issue with the SSH connectivity groups, it does not let me use SHA256 which means my FIPS 140-2 SALT automation server can't connect in and run commands from the firewall itself. There are options to set the ASDM and VPN exchanges, bu...
Resolved! FirePower task running indefinitely
Hi,On my firepower, 2 tasks are running indefinitely (1 waiting and 1 running) despite rebooting management firepower and FP Modules Task 1 : LDAP DownloadTask 2 Insttalingh Saurcefire Geolocation Database update Any help how to chnage this behaviour...
Hello, Our ASA 5506 shows a MAC address for its Mgmt1/1 interface other than the one learnt by a neighbor switch. I tried to locate Management1/1 's MAC address by issuing the following commands on the Firewall :show interface | i Int|MACshow vers | ...
Hi, guys, The problem may be found, it is due to the service-policies do not work on VLAN1 and VLAN5. I tried to clear stats counters of the service-policy, but only work on vlan160....which means service-policy on VLAN1 & VLAN5 don't work. Anyway to...
Resolved! ASA 5510 site to site VPN
Hi guys,I am trying to use ASA 5510 to create a site to site VPN. After follow configuration guide, I don't see it is trying to establish the connection.Configuration guide:https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-ge...
I have 2 NGFWv/FTDv devices deployed in Azure. They are sandwiched between 2 load balancers to provide "HA" per the video series that everyone watches. https://www.youtube.com/watch?v=Zjc9hmc2m68 My question is when providing access to servers be...
I have a remote 5505 easy vpn connection back to a 5520 (IPSec 3DES). I am getting multiple complaints of slow internal network speed over the vpn tunnel. I have posted my config below; is there anything I can look at or troubleshoot?ASA Version 7...
