Dear Community, AIP-SSM-10 is not automatically updating virus signature/ips update. They have the latest signature update in april 2018 and we manually have to update the signature. does the AIP-SSM-10 automatic update is now closed? Please an...
Forum Posts
Hello We have 2 firepower 8360. I added them in FMC. We want to config them in HA mode. We wand to use 2 port in portchannel mode for HA link between them. I couldn't find how to do it. Can I use 2 port for HA link? How can I do it? Thank you.
Resolved! Repairing an HA failover pair
We had a 5510 fail in our HA active/active failover pair. I've rebuilt the failed one by replacing the internal CF and reloaded it to the point it's ready to be paired. My question is, I could only find a 64MB CF, and the original one was 256MB. Asid...
Resolved! ASA failover key
Can I issue the "failover key" on an active ASA in an A/S HA pair without impacting service? How would I get this command onto the other ASA because I assume that as soon as I issue the command on the active unit, I will break the failover pair and ...
Hi All, Our virtual FMC is not able to ping/communicate on the management interface of our ASA 5516-X. It can ping the inside interface, however pinging the management interface (on the same subnet) fails. On the ASA cli: 18: 08:07:44.635236...
Hi All I would like to migrate a pair of legacy ASA replace with new ASA running in FTD 6.2.3 With no using any tools migrate the existing config (reconfig from scratch), i would like to know the sequence of setting up the FTD in HA. This is my...
Hi All, Just wondering if I can mix or in another words use 1G and 10G SFPs on same 8-Fixed ports module on FP 4110? Or is it either all 1G or 10G SPFs and no mixing allowed. Regards. Riz
Dear All, Recently I have received a new RMA ASA device and configured fail-over with existing ASA then it is unable to pass traffic in DMZ1 and DMZ2 but other LAN zone is working fine.When I disconnected the new ASA and reload the existing ASA the...
Need to connect to do homework. Online resources and phone tech support were useless. Mac is on 10.13.6 AnyConnect version is version 4.5.02036 Failure message reads: "Connection attempt has failed due to server communication errors. Please retry...
Hi all, below is my network topoloby. inspect SIP is enabled by default. it will create a lot of sessions which doenst even pass through the firewall and caused connection limit alarm "Resource 'conns' limit of 250000 reached for system". from ...
Hi, Does anyone have AnyConnect on Firepower (FMC) using AD (rather than RADIUS) while having access control via security groups? With RADIUS this could be done as NPS policy conditions. Currently if you use AD authentication it will let anyone wit...
I've got an 8-port ASA 5505 installed at a (very) remote site and I'm getting errors indicating Ethernet0/3 is going up and down and up and down and ...I'd like to see what device is plugged into 0/3, but there doesn't seem to be a "show mac-address-...
My ASA5525 version is 9.5(2), I don't know why my default route to outside doesn't work properly. I can't ping through 8.8.8.8 and remote VPN user is able to get vpn connection remotely but can't get internet through outside route. Below is my partia...
I have an issue whereby I am migrating Juniper SSG firewalls that have multiple VPNs to Cisco FTD running FTD 6.2.3 software (Not ASA). The problem is the Juniper SSG's terminate all the s2s VPN's on a loopback interface but the ASA cannot do this....
I have a question about upgrading ASA5585-S10-K9 There are two options 1) CISCO ASA5585-S10-K9 2) CISCO ASA5585-S10X-K9 with 2x SFP+ Ports. My question is, when i have CISCO ASA5585-S10-K9 without 10G ports, can i enable and use these ports with s...
