Hi, we made a URL filtering rule (to block some URL categories) and set HTTP response page. And it is working ok. But in order to show users a response page when they are blocked accessing HTTPS site, SSL decryption needs to be activated (so manual...
Forum Posts
Resolved! SSD for ASA 5515X
hi all,we have an opportunity to sell cisco ASA 5515X firewall. and i have one doubt.do i need to order SSD drive with ASA 5515-X with IPS? Please note that i dont want to have CX software, i just want to enable the IPS software on the firewall.and i...
Resolved! Problem with ASA packet tracer
Hi everybody, i'm trying to config my ASA 5505. But it drop both icmp packets and telnet connection from allowed host, also after i've created an access-list... i post the asa running conf: names ! interface Ethernet0/0 switchport access vlan 2 ! ...
We are experiencing decryption issue with our two ASA 5555-x \Firepower appliances. We are receiving " ERR_SSL_Protocol_ERROR" when visiting sites. Restarting the browser temporarily resolves the issue, and disabling SSL decryption permanently resol...
Resolved! ASA FTD with FMC
Dear team, I'm currently setting up my data center with Cisco ASAs and am attempting to use the ASA running FTD and manage them via FMC. My first issue was with licensing. Since I'm using FMC after version 6, the license (classic) is no longer ac...
Resolved! bulk fetching access-rules?
Is it somehow possible (or what would be the best approach) to bulk-fetch multiple accessrules? When I do a GET request on /api/fmc_config/v1/domain/DOMAIN_UUID/policy/accesspolicies/CONTAINER_UUID/accessrules I get a list of all of the accessrules...
We have several interfaces setup on our ASA 5516 with different security settings in the access lists. I have 2 of these interfaces that are causing me a head ache. For example. Interface 1 (172.16.1.x corporate network) and Interface 3 (192.168.1....
Hello everybody I have ASA 5540 and its configured for VPN over SSL only. it has been working for 2 years smooth, but since 3 days ago something weird is happening on most of my ios clients who are using cisco anyconnect on their IPhone and IPad. ...
Resolved! ASA 5505 - CA Certificate for LDAPS
Good afternoon! I have an ASA 5505 which is connected to an Active Directory DC for AAA via LDAP. I want to move to LDAPS. I have a local CA that provides the DC with its DC cert (for LDAPS). LDAPS is working fine with several other devices on th...
Hi, One of Our Clients are planning to convert their existing Multi-Context Firewall into a Singel Context ASA. They have a Apex Anyconnect License and is wondering if this License will be usable and compatible to the Single Context One. Apprecia...
Resolved! Hi, I have an issue with my ASA 5505
Hi, I've got an ASA5505 to study. And i'm trying to download an asdm of this ASA device from https:// There is my configuration : Saved:ASA Version 8.2(5)!hostname ciscoasaenable password 2KFQnbNIdI.2KYOU encryptedpasswd 2KFQnbNIdI.2KYOU encrypte...
Resolved! 5520 management port issue
hi.I've got a 5520 firewall (well, two, but they're active/passive, so one logical unit) and I've connected the management port to a VLAN in my infrastructure.Which is fine if I access it from within the same subnet - I can access the management port...
Hello,I have bought a cisco asa5516X with control and protection licenses. I want to block "hotspot shield" and I use the firepower module to do it but it doesn't work and hotspot is always working on clients. Someone can help me to do that please?T...
Is it possible to utilize any dynamic IPS | IDS functionality of SourceFire for known malicious IPs and geo-blocking of rogue nation states without the purchase of a dedicated IPS | IDS system. Can I, for example, utilize Brightcloud | Talos to fil...
Hi community, We have a pair of 4150 FTDs being managed by an FMC 1000. As part of our policy configuration we have a default action of deny for any traffic that does not match an allow policy. We also have logging enabled for this rule. I was look...
