I need to download the running-config from a 5585 and upload to a 5585X. Copy and pasting just has too many errors and I need to make sure all configs are transferred over to the 5585X. I think I know how to download it via GUI, but how to I upload t...
Forum Posts
Hello everyone! This is my first time configuring an ASA 5505. That’s why I wanted to try a configuration in Packet Tracer. I have a problem with PAT configuration, there are 2 vlan behind the firewall, they are connected to L3 Switch. If I try ping...
Using ASA5506-X Kindly give suggestion possibility and license which will cover following. SQL injection prevention. (IP block) FTP access control / block on 3-5 wrong attempt Ransomware like attacks prevention. Log analysis ...report ... Preven...
Hello, I've taken over a FirePOWER deployment from a predecessor and noticed that when following connection events, one of the useful fields for analysis is Initiator User, which is helpful to determine what user (based on agent communicating with ...
Hello Guys I have E-commerce server on the DMZ, needs to talk to DB server on inside E-commerce = 172.16.1.100 on DMZ DB = 192.168.1.100 on inside is the below correct object network E-Commerce host 172.16.1.100 object network E-Comme...
dear supporti have a problem recently, i have a 2811 router, there are several EIGRP VPN tunnel setup on it, recently i found this router running high CPU utilization, it almost reach 80 percent at the most day busy time, when i try to find what proc...
Resolved! ASA Packet inspection function
Hi All, I have a kind of basic question. 1)Firewall model -> Cisco Adaptive Security Appliance Software Version 8.2(5) 2)nat-control enabled 3)Inbound connection (initiated from the outside direct to inside) 3)regular static NAT configured static (...
I have a strange issue. Customer had 2 peer IP's configured in a tunnel: crypto map outside_map 1 set peer 1.1.1.1 2.2.2.2 The tunnel would establish fine to 1.1.1.1 but then it would eventually get torn down for this reason: "Peer Address Change...
Scenario: We will be deploying several FTD in different locations. FMC communication will all be private IPs (No NAT involved). It will be all just different subnets. FTD --> Router --> Router --> FMC We followed the deployment guide, FMC seems ...
Hey everyone. On Firepower it shows that my firewall is disabled. I think it could be due to the management IP address, but I'm not sure. Is the management ip on Firepower supposed to match the management ip that's in my ASA? In addition, whenever ...
Hi guys, I am about to pull the trigger on refreshing our old ASA's with 2110 FTD devices however I was just wanting to double check that they will support Site to site IKEv1 VPN to 3rd party equipment? (not sure if its cisco etc) I read on the fir...
Resolved! ASA vs Sophos
We are running a cisco 5510 and looking to upgrade it. Recently a company sale person came and give us a pitch for sophos 650 and wanted to sell us. I being using cisco product for long time and find them reliable and like the command line from switc...
When creating a site to site VPN on the FMC for FTD devices, is it possible to create a backup VPN for another site? for example if site A normally has a VPN to site B but should site B be unavailable can site C be configured as a backup? This doesn'...
Resolved! ASA 5505 Slow internet high CRC
I am experiencing slow internet connection. This week I upgraded my connection to 50/10 but when I run speedtest I am only getting 10/5 (which was my old speed). These are some of the commands I've run: sh int e0/0 Interface Ethernet0/0 "", is u...
Resolved! Syslog Server Log Format
Hello, We configured Syslog server on FMC and the intrusion even logs being forwarded from the FMC to the Syslog Server. In the Syslog Log Format, there is no interface information. May I know is there any way to configure the Syslog to contain th...
