Helllo , We have 2 level of firewalls at my company. We have 1 DMZ sitting on the perimeter and a cisco firepower acting as internal/core firewall. We have an exchange server that should be publicly be accessible. Where do you recommend putting t...
Forum Posts
Hi, Recently we have migrated to FTD 4100 from ASA 5585. Our system team runs scripts on the server using the putty session to the servers these scripts runs for hours .Earlier with 5585 these ssh sessions used to work properly but after migration ...
Dear Experts,we have an ASA 5585-X (Hardware: ASA5585-SSP-40, 12288 MB RAM, CPU Xeon 5500 series 2133 MHz, 2 CPUs) used as edge firewall to protect our datacenter.The firmware version is:Cisco Adaptive Security Appliance Software Version 9.4(4)5Devic...
Hi All, I'm trying to run some nmap scans to inside subnets over AnyConnect VPN, but the results are very incosistent. Meaning: sometimes even just a basic portscan will report 0 hosts as up. 5 seconds later the same scan shows the right hosts as u...
Resolved! CISCO ASA 5510
Hi people! I have an issue, while it shows that I am connected to a network and it's having internet.I can't open pages.I suspect it's a dns issue or a routing one.I paste you my config. asa5510(config)# show conf : Saved : Written by enable_15 a...
Hi, Recently we have migrated from ASA 5585 to FTD 4110 . After migration we are facing problem with FTP and sqlnet traffic. Earlier it used to work properly but after migration some times its working and some times connection time out. We used the p...
Hello - So Im working on a bandwidth issue in our Thailand sensors and Im looking for a way to identify the last successful deployment of a policy to a sensor. Anyone have a suggestion?
Resolved! FMC - device CPU monitoring
I use FMC to monitor a HA pair of 2140s with FTD 6.2.3.3. I sometimes receive alerts for high CPU e.g. Health Monitor Alert from XXXX (mgmt ip of 2140 device) Time: Mon Sep 10 09:23:48 2018 UTC Severity: critical Module: CPU Usage Description: Using ...
I have an interface with an access-list bound to that interface as "in" ACL with the following line as first line of the ACL: access-list from-mpls line 1 extended deny udp host 10.255.9.2 eq syslog host 10.255.7.254 eq syslog But with packet-tracer,...
I was installing ACS 5.2 on VMware by setting all the minimum requirements but still not detecting the hard disk and showing the following error:
Resolved! ASA 5505 isn't logging permitted packets
i guys. History: I got notification from IT security team that one computer in subnet 10.244.244.0/26 has a malware on it (it's opening multiple connections to 192.42.119.41 detected by IPS as malware). I need find out that computer private IP. ...
Hi teams, i have qns abt the Apex and Plus VPN license. correct me if i am wrong that if i propose Apex license, so that our customer can use both agent and web based vpn rite? many thanks for your support. Br, hainm
We had recently deployed ASAv HA in Azure for High Availability it will act as a perimeter device for internet access. We had deployed Azure external load balancer ahead of ASAv HA Some of the application (servers) relies on STATIC NAT for outbound...
I have an FTD currently being managed by a virtual FMC and I'm moving it to a FS4000 appliance. Is there any documentation for the proper steps to move the FMC? I already have the policies and objects created on the new FMC. What happens to the inter...
Hi, what would be the best way for creating multiple S2S IKEv2 VPNs between central FTD with static IP and ASAs that have dynamic IPs. So far as I understand I on ASAs i need to configure static crypto-maps and connection profile with IP from FTD....
