I'm looking for a best practices for deploying FireSight? Can someone help me? thanks-mikgruff
Forum Posts
I will be setting up a VPN that requires static NAT for roughly 200 hosts, and each host must always use the same translated address. This is on an ASA 5525X running 9.6(4)3 My first thought is, for each host, create a network object with the local...
How to view & verify object-group Hi Anyone how a make the command show object-group network returns the name, and comments for the object group? like: #show object-group network | inc 10.80.30.46 RETURNS (SAMPLE): object-group network SE...
Resolved! Going for ASA 9.6.4
hi, i have a mix of ASA 5500x with 9.1.x, 9.2.x, 9.4.x, 9.5.x that i needed to upgrade. looking at the software download, the TAC recommended codes are 9.4.4, 9.6.4, 9.8.2. my questions are: 1) in a nutshell (not referring to release notes), what are...
I have an ASA 5506 that is fully licensed (i.e. Control, Protect, URL and Malware).When using ASDM, there is a “FirePOWER Reporting” tab. But it has only displayed “No Data Available”. How is FirePOWER to be configured inorder for data to be availabl...
Resolved! Sub-interface Nat problem
Hi all, On Asa I have configured 2 internal sub-interfaces GigabitEthernet0/3.50 and GigabitEthernet0/3.70. Config on both interfaces : GigabitEthernet0/3.50 (vlan50-192.168.50.1/24) security-level is 80. GigabitEthernet0/3.50 (vlan70-192.168.70.1/...
A costumer of mine would like to check the firepower managemnt center storage capacity fon connection event. How can I check the amount of event stored per day? He would like to store 1 years event logs complete with users activity. how can I check ...
Resolved! ASA /31 subnet mask
Does any one know the reasoning behind not allowing the ASA to accept the /31 range to be configured on the interface?
Resolved! ASA ACL drop all
Hello, I'm trying to configure the ACL on ASA 5505. I added some Permit Rule on outside interface (what I'm using for the test) but when I use the Packet Tracer on ASDM it say Dropped at "Global (implic rule)" It does: - ROUTE-LOOKUP: Ok - ACCESS-LIS...
Hi Gents,I'm facing a issue in my environment when I try execute a backup using FMC-virtual version 6.2.3. Looks like there is no resource enough. as you can see below:Does anyone might help me on this?------------------------------------------------...
Hi, recently we bought an ASA5508x FTD, and we are doing the first set-up, but the local web browser management is very limited in my opinion, shoud we need to purchase a license to be able to download the FMC?
Resolved! How to manage ASA's deployed on FP4110?
We have a customer that has deployed several FP4110 but are only running ASA's on them. They are requesting a way to centrally manage them. As far as I can tell FMC does not manage the ASA deployed on FP4110. The Cisco Security Manager is EOL. Also t...
Hi guys, I have an Active-Active cluster running 9.6 (5525X). I currently have 3 interfaces: - inside - mpls_link - outside and a network for which I do SNAT from inside to outside. This would be the current scenarion. Now for one host behind...
All,I have an ASA at a DR site that I would like to be able to have it authenticate our telnet sessions via radius. The problem is that the radius server is at 10.10.10.52 and it would be out of the management interface. If I change the radius server...
Hi, The context here is an IOS Internet router with ZBF, ITSP on the outside and CUBE gateway on the inside. SIP signalling and voice media therefore have to pass through the ZBF and obviously we want to create as few holes in the firewall as poss...
