Hi all,I've tried to make a redirect list to some traffic from ASA to Websense. This is part of the configuration:......wccp 0 redirect-list REDIRECT_WCCP group-list WEBSENSEwccp 70 redirect-list REDIRECT_WCCP group-list WEBSENSEwccp interface inside...
Forum Posts
I just activated multicast routing on a blank ASA and it warns with this message:WARNING: Interfaces part of explicit zone will not participate in multicast-routing Could somebody clarify why it appears and what cisco means with explicit zone? Thanks...
The below does not work. Can't even ping the public address (.196). But if I change the test to make the source of the internal IP of the PBX an IP on vlan 1 (192.168.7.x) which is not sub-interfaced, I have no problems. Is this a 5506 bug or am I ...
I deployed an ASAv in Azure to start vetting it as a solution for the edge of out cloud deployment. According to every doc I can find on it, the ASDM should be installed and working. However, I've turned it on in he config and when that didn't work...
Hi, I am running a ASA 5525-X with Firepower, the firepower is managed from Firepower Management Center. Due to a bug in the current version I want to upgrade the module and the management center to the latest version. Can anyone tell me the correct ...
hello everybody, I have a issue with access the server (use port 80) with the ip 192.168.0.6 after upgrade firewall 5545 to version 9.8.2.28 before was 9.4(1). The problem is the following:I lose communication to the server every 3 weeks and I onl...
Hi Experts, I would like your help regarding my issue on my Active/Standby configuration on my ASA. Here is my topology and configuration below to better understand: ACTIVE ASA CONFIG failover lan unit primaryfailover lan interface FAILOVER...
Hi, I have the following NAT rule for an internal server to reach an SMTP server: nat (inside,outside) dynamic interface If I change the above to the nat rule below, email is not sent: nat (inside,outside) static interface service tcp smtp smtp ...
Hi,Last 2 day, network cable between ASA and SW faulty, thus we have changed it.but after that , weird think is email not able to send/receive and unable to open google.com, gmail.comthe user using smtp.gmail.com & pop.gmail.com other URL website abl...
Hello experts , I am getting a bit confused with the smart licensing feature. Not sure if i need it or not in my setup. We are buying 2 x 4120 + 1 x FMC. Required features : URL filtering , NGIPS , Anti Malware and firewalling. Can someone pl...
I have a ASA 5505 and ASA 5508x. In reference to the attached diagram. I am looking to fail-over a Public IP B to ASA 5508x through ASA5505. The only reason for this configuration is the ASA5505 is with ISP A and with out paying a huge amount we can ...
FMC by default provide multiple Access Control and Intrusion Prevention policies. Is there a way to view the content of the system provided access control policies?
Hi, I am configuring a firepower 2110 following the cisco document. https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp2100/ftd-fmc-2100-qsg.html FTD version is 6.2.2-81. I would like to configure the management interface to the s...
We are installing an FMC 4000 into our network and wanted to use the 10 gbt ports on the chassis. We have some SFP-10G-SR sfp+ modules that we wanted to use. Can we use them for the FMC 4000? Are there specific sfp+ modules that we need to use?
Hi All, We're massively cleaning up firewall rules to harden the network, but on some interface we have some permit ip any any rules which ofcourse are hit massively. I want to further investigate this but haven't done this before. What is the go...
