Hi All,I just created a IKEv1 IPsec S2S tunnel, but for some reason the IPsec SA only comes up if i initiate traffic from our (Cisco ASA) side. The other side is Microsoft Azure. LSPASAAMS203# show run crypto ikev1 crypto ikev1 enable Internet crypto...
Forum Posts
Hi all, I followed exactly this article: https://docs.microsoft.com/nl-nl/azure/vpn-gateway/vpn-gateway-3rdparty-device-config-cisco-asa but my tunnel is not working. It seems as the problem is at Phase 1 already, but i can't find the problem. ...
Resolved! FTD AnyConnect Client Deployment
Hi, I'm configuring an FTD/FMC for AnyConnect VPN access. The customer does not want to automatically push the client image from FTD, but wants to manually install the client. Is there a way to turn the deployment feature off with FTD/FMC? I tried ...
I am using the ASA with Firepower service managed by FMC. I am using FMC version: 6.2.1 I can't see Anydesk application in the application category of Remote access or Remote desktop application , and also i am not able to allow it using URL: anyd...
Resolved! Site-To-Site VPN DPD detection
Hello everyoneWe need your help with our Site-To-Site VPNWe have a VPN site-to-site connection the remote client has implemented DPD on their side and requesting we do the same on our Cisco 5505 ASA firewall. My Question; is this recommended by Cisco...
Hi All, I'll be installing a new (single) Cisco ASA soon, and i need to connect that directly to a Active/Standby Cluster. How should i configure this on the new ASA Side? Should i create a "Redundant Interface" and connect the Active firewall to t...
Hi everyone, I am wondering if there is a possibility to allow inter-interface traffic with acls without allowing all traffic on the same security level. So first disallow everything and then allow traffic with normal acls. Is it not possible by de...
Hi,I am getting crazy trying to understand and configure outside access to our customer router with Zone-Based Firewall.Until now the customer was running IOS classic firewall and I decide to configure Zone-based firewall as it will give more flexibi...
I am trying to push a Sensitive Data Detection Policy to detect email and possible passwords being entered in a URL, but whenever I deploy the policy I am given a Snort validation error. FMC 6.2.3.2 ASA with FP Module 6.2.2 Here is the RegEx - Noth...
Hello everyone Today I have a weird error during the iso transfer with a Defense Center 750. I'm making the reimage process for that firesight appliance because it had the 5.4.0 software, I start the download and mount ISO step, but the file transf...
Hello, How do I submit for a website to be unblocked or de-listed from the Cisco website malware database? This website was hacked last year, has been rebuilt from the group up, and yet Cisco thinks it's malicious. We've triple checked all logs, co...
Hi Guys, Do you know which service port does the FMC HA runs? Is is also TCP-8305? thanks
I've created a test rule to block .study, .accountant, .party, .click, .top, .life, .yokohama, .ml TLD's I first created a URL objects and then put them in the group TLD_Top10_abused Created a test policy under users with only me with block with rese...
We have recently upgraded our firepower 8350 to 6.2.3.4 and we have started seeing high CPU instance for SNORT processes and in one of the case we hit major slowness and high traffic drop rates. We have engaged TAC - almost 3 times now and each en...
Does anyone know if it is possible to remotely turn on the power on a FMC 4000 appliance via the ILO connection? I have an open TAC case where we need to do a BIOS upgrade due to a firmware bug. According to TAC, after the firmware is installed the a...
