We have recently upgraded our firepower 8350 to 6.2.3.4 and we have started seeing high CPU instance for SNORT processes and in one of the case we hit major slowness and high traffic drop rates. We have engaged TAC - almost 3 times now and each en...
Forum Posts
Does anyone know if it is possible to remotely turn on the power on a FMC 4000 appliance via the ILO connection? I have an open TAC case where we need to do a BIOS upgrade due to a firmware bug. According to TAC, after the firmware is installed the a...
Does anyone know a way to easily, statically NAT one /24 address to another /24 address, while keeping the host addresses the same. I was thinking something like this, but it doesn't seem to work. I'm trying to avoid configuring a static NAT transl...
Greetings All, Does Cisco have some form of software simulation that I can use for training on the ASA firewall series? Where can I download or purchase? Thanks in advance
Hi guys, I come today with some funny/tricky ACL issue. I have this classic setup: - ASA (default route to the router) <----> 4000 series ISR router - ISR router has two interfaces Gi0/0 toward ASA and Gi0/1 toward ISP - default route is install...
Hello guys, A customer bought a CISCO ASA5508-X Threat Defense and it was delivered with Firepower image but we are not going to use all of the firepower services. How can i disable all the firepower services and related stuffs here ? I just want o...
I am doing a migration from checkpoint R77 to FTD. On checkpoint inbound rules have defined public address in ACL destination which then natted to static internal addresses. In FTD when I have done the conversion it still holding those pub ip's in ...
Just starting to configure our ASA 5525X HA pair to support AnyConnect clients. We currently have several IKEv1 VPNs terminating on our outside interface so I am concerned about the impact of enabling webvpn on the outside as well... is there any ser...
Hi , Recently , I have a problem about upgrading From Old ASA 5510 to ASA5508-X and when finish deploy the new ASA5508-X and found the internet will goes down after 30 minutes. when i switch it back to Old ASA5510 and it is working fine , i found s...
Hello, We just obtained L-S-AC-APX-LIC= SVP Cisco AnyConnect Apex Term Lic PAK for our ASA 5525X HA pair. I went through the registration process and obtained licenses for each of our two ASA's in the HA pair. My questions are: 1. Do I need t...
Hello , Can someone please confirm the number of integrated interfaces on the firepower 4120? (not the I/O modules) I am a bit confused by the online datasheet.
Resolved! ASA 5510 ssh version
We have an ASA 5510 running 8.0(2). I'd like to set it running ssh version 2. To detect the current running version, I see there is a show running-config ssh version command in the document. But when this command is typed in, no any output. How to kn...
I'm sure I have run across this and just don't remember. But, is there a simpler way to hide the "browse networks" link, for instance, on the Clientless SSL portal, other than fully customizing the portal's HTML content to exclude those links ?
I am looking to consolidate a few objects that are the same subject into one. I have been working to copy the IPs out into another file but it has not been working. How do I accomplish this?
we are seeing a lot of the messages below when looking at the reports, Does anyone know what they mean? do we need to take any action Cleared DELETED BLACKLIST DNS request for known malware domain
