How to Resolve this scan result on the ASA? Weak Encryption Ciphers identified on VPN Device Weak Diffie-Hellman groups identified on VPN Device Remote Access Service Detected Thank You. vrian
Forum Posts
Resolved! Changing ASA IKE Policies
hi, i've been asked to replace our current "weaker" IKE phase 1 and phase 2 policies from 3DES to AES. we have active S2S VPNs that are currently using 3DES and was thinking a way to implement this with minimal downtime (or completely lock out remote...
Hi all, I have a direct connection to a remote vendor from my ASA 5516 (9.5(2)) for a hosted web based application. I need to add an IP on my inside interface (192.168.2.26) to use for a PAT address to the vendor. This is the path: Client (192.168....
Hi team, We are using two ISP in Cisco ASA 5516, faced slowness in one ISP.Removed one ISP from FW, after few hours Slowness issue in ISP got resolved. So Added back that ISP to FW. After adding that ISP, got slowness in all machine. If we remove t...
Hi.I am implementing an ASA-5508-X, administered by a vFMC. Both devices were recently upgraded to 6.2.2.0. This now includes remote access VPNs. Yay!I have managed to struggle through and get this kinda working. A client PC can connect in over the i...
Hello, I'm trying to deploy an ASA module on Firepower 4110 chassis, but I receive this output log "max_app_instance_limit_reached" every times I try to install, after reboot of the chassis and after deleting the instance. This the output: F41-A /...
For Site A I have configured IP SLA on ASA with primary default route pointing to internet circuit (on outside interface). When this circuit goes down the IP SLA kicks in and the default route points to the MPLS router (on the inside interface) where...
Hello everybody I have a problem with the update of our AsaThis is a 5512, I updated from 9.44 to 9.64I have 1 clustered asa with 2 asaTo make this update, I first installed the update on the segundaryI restarted, he took the update I spent segunda...
I am currently running ASA 9.1(7)29 ASDM 7.6(2)150. I was wondering what would be the next recommended ASA version to upgrade to? I know that 9.1 ASA software update release are near EOL, so I want to load the next safest release so that I can stil...
Hi I am having an issue with an ASA 5512. It will randomly lock up and from the point on no traffic passes through. The only way to access it at that point is to access via console. When trying to access via SSH we get the banner login and are able...
Just recently installed AMP into production. Rather than logging into the dashboard can I get email alerts when a threat comes into the network with detailed description of the event? Thanks, Michael
Resolved! ASA 5506-X with FirePower services
Dear All, We need to connect a branch office to headquarters by site to site VPN. We got quotation from vendor for 5506-X with FirePower services with following items: I think for site to site VPN, firepower is not necessary, but this is already the ...
hi, Am working on a Firepower 2110 device and we have installed ASA 9.8.2 image in it. We are not able to toggle between FXOS and ASA. From FXOS console there is no option connect asa, there is only connect local_mgmt. Could you please let us...
Hi Everyone 1. nat (inside,any) source static INSIDE INSIDE destination static SITE1 SITE12. nat (inside,twbc) source static INSIDE INSIDE destination static SITE2 SITE23. nat (inside,twbc) source static INSIDE INSIDE destination static SITE3 SITE34....
Hi everyone Im upgrading the firewall hardware. I saved the identity certificates from the old firewall and then I took a screenshot of the ASDM which has the identity certificate information. I then realised that one of the certificates has mor...
