Generally, there are well documented steps to reimage ASA to run FTD (or vice versa), example : https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/reimage/asa-ftd-reimage.html However, if you already have an existing ASA 5500-X ...
Forum Posts
Hello We're trying to implement a new cisco asa 5508 firewall on our site, but we're having a few issues. Currently the firewall when plugged in allows general internet traffic from the internal interface but none of the internal servers which have ...
I've got a really strange issue going on with MAB & dot1x with ports going into security violation every now and again claiming a new mac address is seen. Problem is, I know for sure that the clients aren't being changed on the ports so I'm not sure ...
Hi everyone! I have a pair of ASA 5585 in multiple mode with active/active failover and im trying to improve the redundancy. In the upper layer i have a pair of nexus providing the network access on one interface but the ASA pair it also has anot...
I want to prevent password brute-force to our webmail server from Internet with Rate-Based Attack Prevention and there is just one webmail server internally. I would configure a rule under Control Simultaneous Connections, track by source with max co...
Resolved! FirePOWER report help needed!!
I have been asked to provide a report of a particular users internet usage over a certain time period. I am struggling at the finding the right combination of report parameters to provide these results. Can anyone help point me in the right direction...
Resolved! QoS on ASA-5525X with FirePower Services
I am trying to configure a QoS policy on my FMC server to deploy yo my ASA's to rate limit DropBox traffic. I am running FirePower services v6.20 and my ASA's are running v9.8 in active/standby. When I try to create the policy, I am supposed to ident...
Hi want to know what Cisco Firewall could replace the 1200D fortigate
Resolved! Cisco ASA - add route
Hi guys! I using GNS3 simulator with that kind of image of ASA. I have two questions: 1) Why when I added static route it's does't show up in routing table? 2) Does it possible to configure with that image site-to-site ikev1/IPsec VPN for Lab's purpo...
Does ASA 5512x support gigabit WAN ?
Hello community I am trying to generate some events in order to monitor my environment, but I am facing some issues. I want to drop connections which use "public" or "private" community on snmp gets, but I am being not successfull. I would appreciate...
Hi there, We have an ASA 5555 HA pair that is running at 92% Memory utilisation. On the current trend it will hit 100% memory utilisation in 6 weeks. CPU is OK at 20%-50%, 35% average. What is likely to happen when the device hits 100% memory ut...
ASA DHCP relay Hi everyone! I've got ASA 5506 with FirePower, ver 9.9(2) I'd like to configure DHCP Relay for client from inside_1 int. to external dhcp server behind outside int. For example outside ip add - 10.5.100.2 255.255.255.252 inside_ ip ad...
Hello Guys What about ASA 5585-X , does it become end of sales ?? I still have it in production , now i need to connect it to ACI Fabric , what is the part number of the cable/SFP + to connect it to N9K-9396 thanks all
I have found evidence of Web Proxy Audo-Discovery (WPAD) requests leaving my organization. These come from BYOD machines brought onto my network which are outside of my control. I am interested in blocking 'http://*/wpad.dat' and from my reading th...
