We had recently deployed ASAv HA in Azure for High Availability it will act as a perimeter device for internet access. We had deployed Azure external load balancer ahead of ASAv HA Some of the application (servers) relies on STATIC NAT for outbound...
Forum Posts
I have an FTD currently being managed by a virtual FMC and I'm moving it to a FS4000 appliance. Is there any documentation for the proper steps to move the FMC? I already have the policies and objects created on the new FMC. What happens to the inter...
Hi, what would be the best way for creating multiple S2S IKEv2 VPNs between central FTD with static IP and ASAs that have dynamic IPs. So far as I understand I on ASAs i need to configure static crypto-maps and connection profile with IP from FTD....
Hi All, My customer has 2 ASA and want to implement HA with transparent deployment. But the problem is my customer has ASA5585-SSP-20 w/ IPS SSP 20 and ASA5585-SSP-20 w/ no IPS module. They don't wanna use their IPS, just wanna use the ASA. Can I m...
Hello Everyone, I am looking for guide on how to create PKCS12 file for the FMC using a GoDaddy certificate. We are using FMC version 6.2.3. Highly appreciate your positive support. Thank you
sourcefire 6.2.3 installation files download link
Resolved! ASA 5516 ARP table
Hello All Newbie here hoping you can help. We have an asa 5516 firewall and are currently doing some work with the supplier of our library system. They have recently changed their isp and when we tried cutting over their connection didn't work. I had...
hi, i was able to add a ASA 5525-X sensor in FMC but i'm unable to add/tick licenses (grayed out) and saw this error: Initial policy deployment not started due to validation errors. For details, redeploy manually > show managers Type ...
Dear All, We have to make a report on events from firepower. can we make reports on basis of Action control policy?
In the SDK documentation it is written how to create an ids client IdSClient idsClient = IdSClientFactory.getIdSClient(); idsClient.init(ClientSpecific instanceOf IdSClientConfiguration); But there is no information about where to get some parameter...
Hello, I've been tasked with cleaning up the mess of two ISPs coming into our building. We host websites on one, all other internet traffic on the other. When one ISP goes down, I have to manually make routing changes, NAT/ACL changes, DNS changes, V...
I have a problem with QoS which appears with all images later than 9.5.2, I don't have this problem with 9.5.2. I have two interfaces which look into the Internet and one interface which looks into a local network: Outside_1 and Outside_2 interfaces,...
Need some assistance in how to configure ASA to allow hairpin of public Internet traffic across VPN tunnel. I have a server with an IP of 192.168.99.20 that sits behind an ASA with a VPN tunnel to another ASA with an outside public IP of 100.1.1.1. I...
Resolved! ASA 5510 upgrade 8.4.7 to 9.1.3
I have an ASA 5510 that is used specifically for vpn. This is version 8.4.7 and the idea is to upgrade to version 9.1.3. On the release note of this version said that can be upgraded directly. I request your collaboration to know if i can actually do...
NAT cmds below will nat source & dest to which network-X or net-Y or net-Z? What is the reason so many identical "nat (inside,any) source static net-10.1.1.0 net-10.1.1.0" But with different "net-X net-X"? nat (inside,any) source static net-10.1.1....
