Dear all, We received a new 5525-X appliance this week and after verifying that it powered without issue on the bench, I racked it and began applying a very basic config to test. I decided to setup the FirePower (SFR) module via ASDM but found that ...
Forum Posts
Hello everyone We are planning to replace for one of our customers the ASA 5520 firewall with the Firepower 2110. The customer is using on the existing firewall (ASA5520) a CWS connector. Will be possible to use on Firepower 2110 the same licenc...
Hi, May I know how to get the serial numbers of the power supply modules connected to the sensor using the CLI? Thanks
Hi Everyone, I am in the process of setting up ASA for home lab . In the process have attempted to configure inspection of icmp traffic and was following a doucument I got online. At a point, when enter class-map type inspe...
Hi folks, at one of my customer´s sites I was confronted with a split brain ASA failover situation. Unfortunately the SFP of the failover link was broken. Both firewalls did not "see" each other while the failover link was broken. I did not find ...
Hi all, today I had the Problem that my ASA FW cluster told me: Lost Failover communications with mate on interface xvc Fortunately, it also told me: Testing Interface xvc Testing on interface xvc Passed Also, when i checked the Status etc., e...
We're deploying two 5516Xs tonight, and I had taken for granted the config because I couldn't pre-assign IPs because they will be replacing our current firewalls that use the same IPs. So I've held off until today, and now we're staging things and ...
Dear Team, Currently we have two Site to Site VPN Connections between HO (Cisco ASA 5515-X) and Branch office(Fortinet). ISP 1(HO) Connected to ISP 1 (BO) ISP 1(HO) Connected to ISP 2 (BO) We need to achieve Redundant auto fail over of Site to Site V...
Hi everyone, I'm in need of configuring port forwarding on an ASA 5506 device using an external dynamic DNS address. My configuration is like this: Being this the scenario, I would need to access the machine 10.10.10.23 on port 22 by the address my...
Hello, I'm trying to configure a firewall rules that allow the dcerpc communication between my Active Directory server and Domain Computer. I've got some problem to push GPO from the AD because it use rpc port (port n°135) but after use a new por...
Resolved! Allowing OpenVPN through ASA
Hi, I am pretty new to ASA's, and I've been given this task to do. I've set up NAT a few times on ASDM, which seemed quite straightforward: 1) create network objects, 2) config NAT on the internal network object, 3) create an ACL to allow traffic thr...
How can I put the source port (src-port) as any in the below ASA command instead of specific port? packet-tracer input ifc_name protocol src-ip src-port dst-ip dst-port packet-tracer input outside tcp 192.168.10.10 3389 172.16.10.10 3389 cisco...
Hi, I'm generating reports on firepower for risky applications but it shows empty results "no data to display" while if I check the dashboard I can see the apps in there any idea why this is happening?
Hi, how can I create reports that shows top 10 visited URLs and top 10 users that used most traffic? I am really having hard time finding the right fields that I need to choose for reports. Has anyone done this? Thanks!
Resolved! pxGrid redundancy issue with FMC and ISE
Hi, I am testing Rapid Threat Containment with Firepower and ISE and noticed a strange issue with the pxGrid service used for communication with ISE. We are using multiple ISE nodes in a distributed environment and the pxGrid service is running on ...
