I inherited this firewall configuration, so don't ask why it's the way it is. Here's the scenario: Inside_1, security level 100 Inside_2, security level 10 Outside, security level 0 I need to allow clients on Inside_2 to connect to a web server o...
Forum Posts
FMC 750 was running on 6.2.2 version and when we tried to upgrade it to latest version 6.2.3 it failed. The ping was working fine but we are not able to access the FMC GUI. We tried to reboot the device, no luck. Then we tried to restore the image vi...
Hi Folks, I have a client who does't have URL filtering. I wanted to ensure their outbound connection is not file monitored for Trend updates. There is an inbuilt Trend Application. How can I tell what this consists of? For eg, does it include detect...
Resolved! Cisco Anyconnect Replacement
Hello, Fairly new to using Cisco products so please bear with me. We have been using Cisco Anyconnect and notice it has been end of life for a while now. What are the other options for remote VPN access to a Cisco 5506 with a windows machine? Wha...
Hi, everybody. I have Cisco ASA 5515X (9.8(2)) with installed REST API (REST API Agent Version 1.3.2.200) Now I'm developing Python Class to interact with Cisco ASA. In REST API documentation there is interface objects Is somebody knows how can I ge...
Hello. I am evaluating the firepower services and have a question regarding traffic to send to the module. I currently have rules (ACL's) on the ASA that restrict things such as which clients can perform dns and also ports that they can access. I kn...
Finally got through the procedures to create a CSR and upload the CA certificate for our FMC after finding out the GUI enrollment process has a bug "CSCvf42713". Now the issue is I have to do the same thing for the two devices connected to it. D...
Hello, I have Cisco ASA 5506 and I had to reinstall the SFR module (it stopped responding completely). However, I have the following problem. After the first step - image installation and configuration I cannot install the pkg file. After this comm...
Resolved! DCOM error 10028 - Sourcefire User Agent
Hi all I have a DCOM error in Event viewer linked to sourcefire user agent. It shows that "DCOM was unable to communicate with the computer x.x.x.x using any of the configured protocols". The reference of the error is 10028. In sourcefire user agen...
Hi All, We recently had a network down outage and none of our users could login via Anyconnect. Upon RCA, we found out that this was due to one of our DHCP servers going down. On checking the firewall, I found the following configs: tunnel-group SS...
Resolved! Firewall security on different services
Dear All, I have been running webvpn and other services on my Cisco ASA 5510 from a long time. Recently one of the bodies that inspect network security came up with different result concerning week points in my firewall which includes 1. Remote ac...
Hi ! As far as I know, currently (ASA OS Version 9.9(1)) ASA 5506-x does not support IPV6 over PPP / IPV6CP / RFC 5072. Therefore it is currently not possible to use IPv6 with German Telekom VDSL. A fixed ipv4/ipv6 address for German Telekom VDSL doe...
FirePower Community, We have been receiving some feedback where users are receiving an error message that their license is invalid! Please review the following information which should solve your problem.In order to properly apply a license to a Fi...
Just wondering how everyone is currently managing O365 IP’s on the ASA’s at the minute? I am currently going through the list that MS provide and just copying out the hundreds of IP’s/Subnets and referring them to an object-group which then gets re...
Hello all We have an ASA 5505 (V9.1) with sec+ and a Cisco WS-2960X-24TS-L. 3 VLAN's have been created on the ASA and the Switch. We made a NAT on the ASA for the public IP. As of now, we are able to connect to the outside world directly on the ins...
