Hi All, I have a kind of basic question. 1)Firewall model -> Cisco Adaptive Security Appliance Software Version 8.2(5) 2)nat-control enabled 3)Inbound connection (initiated from the outside direct to inside) 3)regular static NAT configured static (...
I have a strange issue. Customer had 2 peer IP's configured in a tunnel: crypto map outside_map 1 set peer 1.1.1.1 2.2.2.2 The tunnel would establish fine to 1.1.1.1 but then it would eventually get torn down for this reason: "Peer Address Change...
Scenario: We will be deploying several FTD in different locations. FMC communication will all be private IPs (No NAT involved). It will be all just different subnets. FTD --> Router --> Router --> FMC We followed the deployment guide, FMC seems ...
Hey everyone. On Firepower it shows that my firewall is disabled. I think it could be due to the management IP address, but I'm not sure. Is the management ip on Firepower supposed to match the management ip that's in my ASA? In addition, whenever ...
Hi guys, I am about to pull the trigger on refreshing our old ASA's with 2110 FTD devices however I was just wanting to double check that they will support Site to site IKEv1 VPN to 3rd party equipment? (not sure if its cisco etc) I read on the fir...
We are running a cisco 5510 and looking to upgrade it. Recently a company sale person came and give us a pitch for sophos 650 and wanted to sell us. I being using cisco product for long time and find them reliable and like the command line from switc...
When creating a site to site VPN on the FMC for FTD devices, is it possible to create a backup VPN for another site? for example if site A normally has a VPN to site B but should site B be unavailable can site C be configured as a backup? This doesn'...
I am experiencing slow internet connection. This week I upgraded my connection to 50/10 but when I run speedtest I am only getting 10/5 (which was my old speed). These are some of the commands I've run: sh int e0/0 Interface Ethernet0/0 "", is u...
Hello, We configured Syslog server on FMC and the intrusion even logs being forwarded from the FMC to the Syslog Server. In the Syslog Log Format, there is no interface information. May I know is there any way to configure the Syslog to contain th...
When our IA team performed security scans, an SSL Self-Signed medium finding was discovered along with other SSL findings. How do I resolve this issue? We do not use a CA, just a generated cipher and cert by the switch itself along with all the other...
We are attempting to integrate the presence API into a custom directory application displaying a user's presence. I've read through the Developer Guide on how to accomplish this and we're running into an issue with logging in an app-user. I've tried ...
HI , I need to create an object with 100 network in it. Is there an easier way to automatically create the object (from an excel sheet) rather than do it manually ? Thanks
How can I prevent the threat-detection from blocking assess to an IP? I have disabled the basic threat-detection and have included that IP in the exception list. I rebooted the ASA to make sure that there everything is released from memory but whe...
Hi Guys, thanks for an awesome resource! My ASDM reports the following available flash: I've tried a couple of ASDM versions - back to 7.8.1-151. All show the same garbled output. Just wanted to see if this is a confirmed bug or if anyone else ...
Hello, Is it possible to get a report of Internet usage and or web sites visited from sourcefire and ASA 5512 ? And add on reporting tool that would be useful ? Snort ? Splunk ? Thanks
