Hi Everyone, Any idea what could be causing this? #pkts encaps: 1181, #pkts encrypt: 1181, #pkts digest: 1181 #pkts decaps: 1181, #pkts decrypt: 0, #pkts verify: 0 we usually encounter encaps/encrypts are incrementing, but no decaps/encrypt -- u...
Hi Guys, So I deployed my FTD as an IPS meaning I have only inline pairs and 1 mgmt interface. I tried to configure platform settings using FMC but I am a bit confused in some settings which required to include source interface for example SNMP. What...
Hello, Our ASA 5505 is nearly constantly logging the following event over and over again: <162>Sep 01 2018 19:36:55: %ASA-2-106016: Deny IP spoof from (xxx.xx.xx.104) to xxx.xx.xx.5 on interface outside In that event, the first IP address is the ...
Hi. Would you clear me on this, taken from the Cisco FTD 6.2.3 config guide (Network Discovery rules section, page 1971)? "If you want the rule to monitor managed device traffic, application logging is required. If you want the ruleto monitor user...
LS, my goal is to setup an ASA5506 (without Firepower, etc) to a predefined configuration. For this I use a configuration file which should replace the startup-config. To put the file on the system (including the firmware version 9.8.2) I use the...
Hi, I have cisco asa firewall. If my current connection reach 250k my network will go down. Any method to avoid this issue from happen? How to find the root cause?
The company I work in is based in western Norway and we are using a Cisco ASA5505 v11 with Cisco ASDM 7.1(2) as a VPN solution. It was originally setup in 2012, but the ASA Temporary Self Signed Certificate has expired last week and it seems no longe...
https://www.cisco.com/c/en/us/td/docs/security/firepower/623/asa-fp-services/asa-with-firepower-services-local-management-configuration-guide-v623/Managing-Devices.html#33601 According to link above (section - "Applying Changes to Device Configurat...
are there any best practices for using the intrusion policy on the firepower appliance ? you have the "intrusion policy used before access control rule is determined" as well as intrusion policy that can be applied to a specific access control rule...
Hi friends. We want to register a FTD firewall in FMC 2500 using smart license. when I tried to use the token to register the FTD, I receive this error message. the FMC has the connectivity to the internet and receive the updates without any pro...
HI. I am having a problem browsing to the IPS SSM-10 module. I am getting a secure connection failed. The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. ip of ASA 10.57.61.43 ip of IP...
Will someone please help with a part number for a three year 8x5x4 Smartnet contract for an ASA if it exists? I found the numbers for the 24x7x4 and 8x5xNBD three-year agreements and the one-year agreement for what I want - CON-SNTE-ASA556F9. Thank...
Hello all, I have these two nets connected over the public internet with ASA 5510s. 192.168.0.0 < -- ASA1 ---> Internet <--- ASA2 --> 192.168.5.0 Each net does either a simple dynamic or static nat for outbound access over it's local ASA....
Hi All, Going nuts here. I have an ASA 5520 with a factory config on it; Cold spare. Booted it up the other day because I am thinking about HA pairing, and the SSM-10 IPS module is unresponsive. Connected the ethernet port, but still unresponsive. ...
Hi All, I have been tasked with setting up out new Corporate Firewall and have been having non-stop issues trying to get connectivity between the ASA and the switch.I am using ASA version 9, and am using the the new feature where one can place all yo...
