Hi, I have a 5506-X that was running 9.6 with a simple setup that had a small external switch to bridge the inside, firepower, and our network together. I upgraded to 9.9(1) and wanted to make use of the new BVI feature and eliminate the external s...
Forum Posts
Hi, I would like to configure authentication for our anyconnect connection using ldap to check the credentials against our AD. I can configure to use either sAMAccountName or userPrincipalName but not both at the same time. ldap-naming-attribute ...
Resolved! Port Fowarding on the ASA 5525
Hi, I'm currently migrating from a simple iptables Firewall to the Cisco ASA. I'm pretty much done, there's just one issue I'm having here. How do I setup port forwarding? I'm using ASDM but am also willing to use CLI if it helps the cause. ASA v9.2,...
Resolved! Cannot Disable Debug on ASA
I tried the following commands & although the output says its disabled I keep seeing it enabled when I enter "show debug". Also tried in config terminal mode & still could not delete the debug. Usually these commands will delete a debug. I'm confused...
First off Anyconnect works perfectly with 3 laptops my techs are using. They all have version 4.5 Anyconnect client apps & never have any issues. However one of my other users has Anyconnect client version 3.1.12020 & can successfully authenticate (...
Resolved! ssh access to Layer 3 specific interface
Hi I am just reviewing one of our L3 cisco router and I am seeing there are 4 different VLAN interfaces configured with IP addresses (wireless , Data , Video , Management ) when I do ssh to this switch from my desktop I am able to use any of these ...
I have a UCS environment on 3.1.1K firmware and I see that is TLS 1.2 capable (https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone/ssl-tls-vulnerability-response.pdf) Is there any additional steps to make sure TLS 1.0 is d...
This topic is a chance to discuss more about all you need to know about Cisco FirePOWER security solution. On this session, Marvin Rhoads will be answering all kind of questions about FirePOWER Management Center (FMC), FirePOWER Threat Defense (FTD)...
hi，all There is a problem in the VPN connection and authentication failure through the AD domain. The current problems are as follows:1, the terminal now dials VPN can pop out the authentication page;2. After the terminal submits the authentication...
Resolved! Recommended Firewall [Security] reading
Hello I was wondering what sort of path and direction to take on learning more about the security aspect of Cisco. I am getting acquainted with the ASA setup and then I see the NGFW (CX IPS?) and then FirePOWER (also part of the NGFW platform??)....
Hi Everyone, Cisco ASA has Ikev2 tunnel to PAlo alto firewall. ASA is receving packets but no transmits show vpn-sessiondb l2l Session Type: LAN-to-LAN Connection : 184.71.194.134Index : 36 IP Addr : 184.71.194.134Protocol : IKEv2 IPsecEncryption...
Hi,I am just curious how does SLA monitor on ASA work. As I understood and tested on GNS3, when configure SLA Monitor you have to specify outgoing interface and by that you are forcing packets (e.g. ICMP) out through specified interface (something th...
Dear Expert, I am deploying a cisco firepower and don't want to use mgt port. I want to use outside interface ip address to the sfr module. Is is possible?? Please suggest. Thanks....
I used "no http server enable" & also removed any configuration related to ASDM. I also removed all static nat statements. When I port scan my ASA public address I still see the ports open hours later. Goodyear# sh run: Saved:: Serial Number:...
I am a novice with Cisco so bare with me. When I am at work and connect my MAC BOOK to WiFi I can't connect to VPN. When I use my phone as a hot spot its fine. I am trying to look at the config to see how it is being blocked but not sure where to ...
