This is FP4100 running FXOS 2.3. I’m testing AAA tacacs+ for FDM login, authentications work but I’m in read-only. According to FXOS config guide, looks like this one. However I don’t find more details what need to be done. User Roles in Remote Aut...
Forum Posts
Hello, please need help setting up RSPAN between Catalyst 65500 and Catalyst 3560. I have configured the following command on both switch's but I'm not receiving any data in sniffer. 6K5 VLAN Name Status Ports---- -------------------------------- ---...
hi all,it is possible use 1 or 2 Gb memory with ASA 5505 or only 512 Mb ?Thanks
Hi Everyone, ASA1# sh run objectobject network Sales subnet 10.12.12.0 255.255.255.0ASA1# sh run object-groupobject-group service 123 service-object udp source eq 1900object-group service 1900 udp port-object eq 1900objec...
Resolved! Problem with ACL Edited with solution
The issue was that I didn't realize that I accidentally created the service with a source and destination port. The source port is randomly generated along a range of ports so, by designating a source port, I accidentally caused the access rule not t...
Resolved! Unable to install FTD patch 6.2.3.1
Hey everyone, I have a brand new FMC HA setup with two FTD's assigned. The FMC pair is running 6.2.3.1 and I'm now trying to put the patch on the FTD firewalls as well. When I try to upgrade I get an error. This is the log output: admin@dd-suc-fw01-s...
Hi all, I am not sure if this has been discussed or not. I am looking for recommendations on how to move some new Firepower service modules, which run on various ASA 5500-X's and performing only monitoring, from their currently registered virtual ...
Hi, I have a Firepower 2110 device with ASA OS 9.8(2) and FXOS 2.2(2.52). The datasheet says that this device has 12 Ethernet ports and 4 1G SFP maximum and I want to know which ports are Ethernet and which are SFP. When I do show interface it gives ...
Hello, My name is SebastienMy english is not perfect, i'm not natif of this language so i going to do my best. I received my Cisco ASA 5505. My knowledges in network Cisco and in general is very low so i have lot of questions, but for this time b...
Hi there,When FirePOWER is blocking SSL/TLS sites it would be preferable to see a response page, like with the HTTP pages.Is that possible? I guess it is with the enabling of SSL inspection?Any good guidance? Kind regardsThomas Winther
Resolved! FirePower Linux Version
Hi folks, I want to update a host profile that is currently unknown to FMC. I'm yet to find out what flavour but it is not Ubuntu.The only option to for manual entry for linux is Ubuntu. Is it recommended to select this option? It would result in ign...
Hi all, I have an ASA 5505 in my lab where I am trying to enable an IP SLA WAN failover between the primary ISP interface which is a NAT'ed interface and a failover interface that connects to another router that performs the NAT. Can you take a loo...
Resolved! Firepower 2110 EtherChannel
I have ASA OS 9.8(2), FXOS 2.2(2.52) and I am trying to configure etherchannel based on the documentation https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/general/asa-98-general-config/interface-echannel.html#ID-2077-0000001f Ho...
I'm looking for a best practices for deploying FireSight? Can someone help me? thanks-mikgruff
I will be setting up a VPN that requires static NAT for roughly 200 hosts, and each host must always use the same translated address. This is on an ASA 5525X running 9.6(4)3 My first thought is, for each host, create a network object with the local...
