I am doing a migration from checkpoint R77 to FTD. On checkpoint inbound rules have defined public address in ACL destination which then natted to static internal addresses. In FTD when I have done the conversion it still holding those pub ip's in ...
Forum Posts
Just starting to configure our ASA 5525X HA pair to support AnyConnect clients. We currently have several IKEv1 VPNs terminating on our outside interface so I am concerned about the impact of enabling webvpn on the outside as well... is there any ser...
Hi , Recently , I have a problem about upgrading From Old ASA 5510 to ASA5508-X and when finish deploy the new ASA5508-X and found the internet will goes down after 30 minutes. when i switch it back to Old ASA5510 and it is working fine , i found s...
Hello, We just obtained L-S-AC-APX-LIC= SVP Cisco AnyConnect Apex Term Lic PAK for our ASA 5525X HA pair. I went through the registration process and obtained licenses for each of our two ASA's in the HA pair. My questions are: 1. Do I need t...
Hello , Can someone please confirm the number of integrated interfaces on the firepower 4120? (not the I/O modules) I am a bit confused by the online datasheet.
Resolved! ASA 5510 ssh version
We have an ASA 5510 running 8.0(2). I'd like to set it running ssh version 2. To detect the current running version, I see there is a show running-config ssh version command in the document. But when this command is typed in, no any output. How to kn...
I'm sure I have run across this and just don't remember. But, is there a simpler way to hide the "browse networks" link, for instance, on the Clientless SSL portal, other than fully customizing the portal's HTML content to exclude those links ?
I am looking to consolidate a few objects that are the same subject into one. I have been working to copy the IPs out into another file but it has not been working. How do I accomplish this?
we are seeing a lot of the messages below when looking at the reports, Does anyone know what they mean? do we need to take any action Cleared DELETED BLACKLIST DNS request for known malware domain
Hi there, I'm trying to set up a static PAT to a host behind an ASA. Public IP port 2222 is supposed to connect to port 22 of the internal IP 192.168.10.11 The packet-tracer result looks as if it gets highjacked by another NAT rule. I have included t...
Hi , I have procure four firepower 4110 appliance with master bundle and i just want to to know what feature (IPS,AMP, URL) i can enable with master bundle or not. or i can procure separate licence to enable these feature. Regards, Lal pratap sing...
I have been having ongoing issues with CIFS shares in the VPN portal on ASA5510 8.0(4). Every few weeks, CIFS shares stop working through the portal. When it stops working, you get an "Error contacting host" right after you enter your Windows domain ...
Hello , My customer is planning to purchase 2 Cisco Firepower 4120 with IPS. I got confused regarding logging/reporting. We need to store logs for 1 year because of compliance. We need reporting for the firepower ( IPS,firewall -Allow/Deny,Malw...
Hi all, I have tried to created a NAT that any ip address from outside2 with port number 80 translate to DMZ 10.0.0.1:81. This is a part of my configuration. I would like to know the behaviour of NAT with port translation. If a ip address x.x.x.x:443...
Hello Everyone, I am configuring two ASAs in fail over mode but there's is a constrain. We only have one public IP. Will it be possible to configure the same WAN IP on both primary and secondary ASAs? If the primary ASA fails, I plan on just moving t...
