Hi, I have an ASA5520 that replaced an ASA5505 that stopped working. How is the outside interface configured on the 5520 to receive dynamic IP from the ISP? The following was configured on the 5505 to receive a dynamic outside IP. The 5520 doesn't ...
Forum Posts
I'm trying to understand SNMP the way its configured in my environment. I have 2 router configurations below & when I lookup SNMP I see that both the monitored node (agent) & the monitoring system (manager) can initiate SNMP messages. In the Cisco di...
My customer has a 3rd party URL filtering system that we configured WCCP to proxy/filter http and https traffic. They would also like to enable URL filtering on the Firepower as a backup or another place to enforce URL rules. Has anyone deployed this...
Resolved! Possessed Firewall?
So here's a really unusual problem for which I would love a logical explanation. Is my Firewall ASA software infected with Malware?!? So a couple weeks ago my customer calls me complaining of a problem at the corp office. They have a Service-Provid...
Two FTDs in an HA pair lost communications to the FMC due to a configuration mishap. A person reconfigured the management by mistake and now the FMC cannot communicate with the FTDs. I have a lab and recreated this situation. The lab FTDs were reconf...
Has anyone has any experience migrating from ASA using firepower services to FTD ? I was not able to find if ACP which are used for the Firepower Module can be applied applied to the FTD firewall once the firewall has been upgraded ? We are current...
I installed an ASA 5515x with Firepower services version 5.4 about 2 years ago at a customer location. Also installed is a Firesight Management Center VM version 5.4. I have read the release notes on ugrading the FMC (version 6.2), and it states ...
Hello Everyone, Does ASA 5516-X or 5525-X have the ability to mark/change DSCP? Reason behind the title of this inquiry is that I'm looking for a sample configuration where we can mark a data traffic(set it to AF31) from an inside Interface whe...
WE CONNECTED NEW ISP INTERFACE TO OUR CISCO ASA.ALREADY WE HAVE 2 ISP IN ASA.WE CONFIGURE THE INTERFACE FOR NEW ISP AND WRITE NEW NAT POLICY FOR ONE VLAN NETWORK TO CHECK WHETHER INTERNET IS WORKING OR NOT,INTERNET IS NOT WORKING. OUR NAT POLICY IS...
Hi all, I was involved in software currency and have to make sure all the Cisco devices (Routers/Switches) which are running IOS or IOS-XE software should be upgraded to latest software versions. Is there any way I can verify if a software vers...
i have infoblox dns and cisco firepower as edge FW but i have issue , when i see intrusion event in cisco firepower i found that the IP of infoblox dns is the top ip in event , i want to view the original Client IP before it goes to infoblox dns serv...
I need to know if i have FP2110 with IPS license and i need to make HA between them do i need extra license to do HA or not ?
Would anyone be able to advise on how to enforce SSH v2 for connections passing through an ASA firewall? I'm aware of the 'ssh version 2' command, however my understanding is that this relates only to SSH connections to the ASA for management. I've ...
Product Updates, Rule Updates and Geolocation Updates do not work on ASA 5506-X with FirePOWER services 5.4.1 Whenever I update the FirePOWER software and the rules from ASDM (Configuration > ASA FirePOWER Configuration > Updates and when I click “Do...
Resolved! Access control List
Hello I want to create an access control list on a router that does the following: 1) access control list to deny all inbound traffic with network addresses matching internal-registered IP address 2) Deny all ICMP echo request traffic 3) Deny a...
