I am trying so hard to use and love the new NGFW offerings. Especially the new OS, Firepower Threat Defense, since it combines the traditional ASA and SourceFire modules. The only thing that is holding me back is the lack of features available on C...
Forum Posts
I am trying to permit an ICMP ping from Hurricane Electric to keep my IPv6 tunnel alive. I am stumped on how to permit this ping and reply from a certain IPv4 address they use to the router's self zone with Zone Based Firewall. Any suggestions? Ric...
Hi I'm not able to updtae rules & VDB for Firepower 2120 using software 6.2.1 Do i have to upgrade to 6.2.2 before that. Licenses ares enabled with sufficient license that means that my firepower is able to access interenet (and it's shown on the con...
Hello! I am new to ASDM, so please bear with me if my question does not make sense. The situation: We have a Cisco ASA 5505 and a range of IPs going from x.x.x.40 to 46. Two of the IPs are mapped to a sub-domain namely: x.x.x.42 -> mail.company...
Resolved! recovered password on cisco asa 5505,
Hi,if I recovered password on cisco asa 5505, What about old configuration, Do I lose it OR NOT?
Hi, I have a Cisco ASA 5525-X running version 9.5(3)9. I encountered a kind of weird issue regarding access-list. For what I know if you are coming from a higher security level going to low, you don't need to explicitly put an access-list to allow...
At an customer site i have an Site to Site VPN Tunnel. At the Main Office (SiteA) i also have an AnyConnect VPN solution. At Side A the Firewall has two WAN Connections. One connection is for normal internet access and the other is an specific Intran...
I'm doing a trace test but I don under this result, why is it outside to outside? isn't it supposed to be outside to inside? I have a rule for Dest IP.53.117 with service http but it always shows Implicit Rule dropped my packet, why?
Hi, Using BGP Maximum-Prefix Feature I can controlland generate a warning If my router is receiving high number of prefix than configured. Is there any way to do reverse? I mean to generate a warning message if my router is advertising X number...
ASA Version 9.2(2)4 I am having an issue creating NAT to my web server after following suggested sample from this link. Here is my config Webserver:192.168.16.28 Public IP: 80.248.12.189 object network Webhost 192.168.16.28 nat (inside,outside) s...
HI All,I try to do simple static nating .I can see the hits in show nat command output but not able to access the host from outside(internet).In packet tracer i am getting below mention resultPhase: 1Type: ROUTE-LOOKUPSubtype: inputResult: ALLOWConfi...
Dears, firepower auto recommendation were configured how I will know the difference between the last recommendation and the new recommendation , becz I am facing some traffic drops issue after updating to the latest recommendation. thanks
Hi. I want to integrate FTD 6.2.2 with ISE 2.2 using PxGrid. To do the certification part, I have configured a Win 2008 R2 as my internal CA with just these roles installed. This windows machine is member of my internal lab domain. While I ent...
Resolved! Switches vlans
Dears, On every switch I have a vlan 1 interface in shut state but there are some ports assigned to vlan 1 as the default vlan , is it a high security risk to keep the ports in the default vlan though my vlan 1 interface is shutdown. thanks
Resolved! TACACS+ for Console ASA
Hello all, I am trying to use TACACS for authentication / authorization. My setup is shown below. On the Router, everything works really well. For the ASA, I can ssh, telnet and http with no issues and I am going straight to privilege level 15 (exa...
