imagine basic asa setup with two outside interfaces, two providers, and one inside interface. I have route map that route traffic from one inside ip to provider 2 and default route to provider 1. If I implement reverse path check, asa uses routing ta...
Forum Posts
I am currently using Cisco Firepower Management Center (FMC) and would like to collect logs that include detailed information about users' requested URLs and send them to a central syslog server for analysis.Here are my specific requirements and ques...
We are trying to to activate the "carrier" license on the ASA5525-DC-K8 unit, so that we can use SCTPThe current licensing shows: Carrier : Disabled perpetualCan anyone help us find the correct part number for this license?Thank you.
Hi All,After completing an external pentest we were informed our FTD1010 is vulnerable to the ZOMBIE POODLE attack. I have found articles on how to remove the affected CBC ciphers via FMC but our device is managed via FDM. Does anyone know of a way t...
Before I say anything, I would like to say that I just started using packet tracer and barely know how to use it thanks to my professor being bad at teaching. Now to my problem, my firewall is not allowing packets to go through in or out and I have ...
I want to downgrade FTD v6.4.0Boot Loader version: 1.0.18 (ROMMON)System version: 2.6(1.133)Service Manager version: 2.6(1.133)USB does not work. I've try few USB 2.0 1 GB pendrives.I've try connecting with tftp server like in yt video: 'How to conve...
Hello, I have a Firepower 3100 FTD cluster managed by FMC, deployed between two Cisco 9500 L3 switches. OSPF is configured on the FTD and both routers. During a failover (cluster role change), the OSPF neighbor relationship gets re-established, resul...
See the below result of #Show module ips detailsCard Type: UnknownModel: N/AHardware version: N/ASerial Number: FCH2042XXXFirmware version: N/ASoftware version: 7.1(7)E4MAC Address Range: a0e0.af52.cb3b to a0e0.af52.cb3bApp. name: IPSApp. St...
Hi All,I'm currently implementing a pair of Cisco 3130 FTDs in active/stanby HA. The firewalls will be located within the same campus site but in different buildings. I'm trying to determine the recommendations and best practises for the failover lin...
I have a HA pair of FPR-2130s managed via FMC running ancient version 6.2.3.18 and the CA cert for sftunnel trust have expired. This is a production environment with very short maintenance windows and I am trying to find a solution to this issue. Cis...
Resolved! Upload ASDM image over Console?
Hi, I am provided with console access to ASA 5510 (v9.0). However, I am not close to the device and hence I am accessing it via Teamviewer. It is a Windows 10 Laptop that is consoled to the firewall. I am trying to identify on how to upload the...
hi,i'm trying to configure a FPR 1120 ASA multiple mode for 10 security context.i tried to configure feature context 10 but it's not letting me do so. i saw total is only 3 using syntax help mode.per FPR 1000 series data sheet, the 1120 context can g...
Hi AllDoes anyone know if its possible to see what DAP policies or ACLSs are applied to a Remote access VPN session on the FTD?We can do it on the ASDM on our ASA, but where can we find this info on the FTD?Cheers
I have configured my access switch interfaces with DOT1X authentication from Radius server. And my end host connected with these interfaces are getting their IP from DHCP server. But since my end host clients are not able to authenticate successfully...
Resolved! FTD Configuration Resource Utilization
Hello,I would like to ask if there is a way to check current values when this health check (Configuration Resource Utilization) is in green. Few weeks ago we had a problem where it was warning us that we are reaching maximum values and it showed valu...
