Hi Forum I have a question regarding the licensing on a Firepower 4110 with an ASA Logical Device. The Logical Device is licensed by default for 10 Contexts. If I have 2 x 4110 Firepower Appliances both with ASA Logical devices configured in High A...
Forum Posts
Hello I need to move some FTD devices (FTD 2100, and ASA w/FTD) from a virtual FMC to an existing physical FMC. I have seen some comments about when you de-register a firewall from FMC, you lose its configuration. Is this true? If so, can I back...
Resolved! FireSIGHT Custom Report
I'm just trying to figure out how to add a table in a custom report that will show the top requested URLs from all users on the network. I've tried all sort of combinations but can't figure it out. I'd appreciate any help! Thanks
Resolved! EIGRP Through Transparent ASA
Hello, Hoping you can help please. I'm having issues with passing traffic through a Cisco ASA 5525-x when in transparent mode. The Transparent mode firewall has been placed in between a layer 3 switch and another ASA running in routed mode, they ...
HelloI have BGP peering with two ISP (defaults from the both of them), the problem is that I need to put only ASA on the perimeter? and ASA is not like asymmetrical traffic.When I had configured TCP bypass I get a lot of the "No valid adjacency" mess...
Please, can we configure DHCP Snooping and IP Source Guard on a Distribution Switch or is it only on access level that these can work?The Scenario here is: We have Cisco 2960X as our distribution switches with VLANs on it for more than 50 subnets at ...
Dear Team,In Cisco ASA Active Passive mode, suppose primary firewall fails then my any connect VPN will be disconnected or not.Regards,Jitesh Mahajan.
Pair of 5515-x with SFR , in Active/Standby failover. Policy-map is configured for: sfr fail-open If SFR fails on primary/active device, is: 1. primary device stays active since it's configured for sfr fail-open? 2. failover occurs and secondary be...
How can I determine which Rule the drop is coming from? What does the ID value 0x73d6a600, represent? i can post config if necessary. i am trying to understand why our AD server (192.168.16.10) cannot ping our DB Server (192.168.80.59). The topology ...
As the title suggests, I am trying to view the logs of an ACL. Below is the line of configuration I have in my config. access-list VPN line 13 extended deny ip any any log informational interval 300 (hitcnt=192) I how do I view the actual dropp...
ASA CLI Book says: "You can configure one access-group command per ACL type per interface per direction." Does this mean one command per interface, or one command per direction? Can we add two rules on outside interface? Sg like this: access-list OUT...
Hello All;I am deploying a redundant pair of ASA 5545X Firewalls and using the ASA-IC-6GE-SFP-C fiber card to provide fiber optic interconnectivity to the firewals and for failover capabilities (The firewalls are located across the campus from eacho...
Hi,We have pair of ASA5585 (ver 8.4(4) with IPS module configured with Active/Standby failover. There are total 09 interfaces are connecting to different zones in the firewall and out of which three(3) interfaces are connecting to Palo Alto 2nd layer...
I have a Lab setup where there is a FMCv, FPR-2110-FTD, FPR4110-FTD, 5515 W/Firepower Services, and 5506-FTD. All the FTD devices us an IP Address in the 10.239.1.0/24 network assigned to the management interface to communicate with the Manager (FMC...
Hello, I bought a used IPS 4225 to learn about IPS, I am having problem figuring out how to connect it physically to my home network and be able to access it through the GUI. I searched for about 3 days trying to figure it out but couldn't find anyth...
