I have configured ipsec site to site between ASAS .. Nat is configured on both end .. phase 1 is up and phase2 is not .. There is something in the NAT , I have done correctly still phase 2 is not up , could you please find out .. i have attached b...
Forum Posts
I have been given the task of replacing our current Cisco ASA 5506-X with a new ASA 5506-X due to an issue. I have collected the configurations from the old ASA's and now I need to put them on the new ASA's. How much of the new ASA do I need to set u...
Hi Experts, We've 3 zones called Inside, DMZ and Outside. We're doing PAT for Inside users to reach out to Internet using External Interface public IP . We've applied ACL's on all interfaces (In->Out, Out-In, Out-DMZ, DMZ-In). My query is, I ...
Hello Team,please i just setup an asa5505 for and configured anyconnect using asdm 7.6, but am unable to https to it from the internet.below is the configure, kindly advice me:Result of the command: "sh run": Saved: : Serial Number: JMX180240B7: Hard...
Resolved! Opening Port on Router
Hello, Product: ASA5508-X, software version 9.7(1)4, Firepower version 2.1 (1.66), device manager version 7.7(1)151 with ADSM version 7.7(1)151. Setup: Ran the Starup Wizard using the ADSM. IP from our provider is dynamic (outside). Inside ra...
Hi Forum I have a question regarding the licensing on a Firepower 4110 with an ASA Logical Device. The Logical Device is licensed by default for 10 Contexts. If I have 2 x 4110 Firepower Appliances both with ASA Logical devices configured in High A...
Hello I need to move some FTD devices (FTD 2100, and ASA w/FTD) from a virtual FMC to an existing physical FMC. I have seen some comments about when you de-register a firewall from FMC, you lose its configuration. Is this true? If so, can I back...
Resolved! FireSIGHT Custom Report
I'm just trying to figure out how to add a table in a custom report that will show the top requested URLs from all users on the network. I've tried all sort of combinations but can't figure it out. I'd appreciate any help! Thanks
Resolved! EIGRP Through Transparent ASA
Hello, Hoping you can help please. I'm having issues with passing traffic through a Cisco ASA 5525-x when in transparent mode. The Transparent mode firewall has been placed in between a layer 3 switch and another ASA running in routed mode, they ...
HelloI have BGP peering with two ISP (defaults from the both of them), the problem is that I need to put only ASA on the perimeter? and ASA is not like asymmetrical traffic.When I had configured TCP bypass I get a lot of the "No valid adjacency" mess...
Please, can we configure DHCP Snooping and IP Source Guard on a Distribution Switch or is it only on access level that these can work?The Scenario here is: We have Cisco 2960X as our distribution switches with VLANs on it for more than 50 subnets at ...
Dear Team,In Cisco ASA Active Passive mode, suppose primary firewall fails then my any connect VPN will be disconnected or not.Regards,Jitesh Mahajan.
Pair of 5515-x with SFR , in Active/Standby failover. Policy-map is configured for: sfr fail-open If SFR fails on primary/active device, is: 1. primary device stays active since it's configured for sfr fail-open? 2. failover occurs and secondary be...
How can I determine which Rule the drop is coming from? What does the ID value 0x73d6a600, represent? i can post config if necessary. i am trying to understand why our AD server (192.168.16.10) cannot ping our DB Server (192.168.80.59). The topology ...
As the title suggests, I am trying to view the logs of an ACL. Below is the line of configuration I have in my config. access-list VPN line 13 extended deny ip any any log informational interval 300 (hitcnt=192) I how do I view the actual dropp...
