Hello,Friend I am really confused in configuring a site to site vpn;can somebody help me by giving me the way forward for sorting out the issue?I am configuring a site to site vpn where the remote IP (public) is used twice on my firewall as it has to...
Forum Posts
Hello All, I need to upgrade cisco asa from 9.6(2)7 to asa964-5-lfbff-k8.SPA, are there any changes in configuration ? Thank you
Hello, M name is Bernard and I would like to request some assistance with an ASA 5505 which is giving me the error "unable to launch device manager from xxx.xxx.xxx.xxx(x represents the IP address of the ASA) when I launch the ASDM application.I'm n...
Hi All, I am doing a new deployment of Virtual Firepower Thread Defense (FTDv) using ESXI and using ACI as bridge domain for my infrastructure. My problem is the FTDv is running in Transparent mode between 2 routers and these routers will be runn...
Dear all,Please let me know bellow.I want to allow only google mail using source and destination concept.How to configure source and destination using i.p and port number if we are using dynamic i.p Thank you Regardssuresh
Hi, I have a new ASA5508 where i installed the new FTD 6.2 I think the interface looks OK, but i cant find out how to monitor the site2site VPN Can anyone tell me o i can see status of the VPN tunnels, and how to see some log if i have a tunnel wit...
I am wanting to deploy a FTD virtual into Azure using the pre-built on the from Azure Marketplace. I want it to be in Routed Mode and to have an Inside, Outside, a DMZ interface, and finally an interface for Management.It sounds like the FTDv only s...
Hi I am planning to install ASA 9.9 code on FTD 4150, do we need different management IP addresses to FTD and ASA or do they share same management IP address? I believe FTD 2100 Model shares same management IP address between FTD and ASA if we inst...
My ASA reboots without notice once a day and my syslog shows no signs on what causing it. What should I be looking for or set the logging where I can catch it.Thanks
Hi, I just want to make sure i have the correct upgrade path in mind. All are using ASA with NGIPS. Current FP build is 6.1.0.5 I have upgraded our FMC to 6.2.2.2-109 For the modules i would import the following updates into FMC to successfully...
Hello all, Seen cases where nat is done on the border gateway router. Just wondering is there any advantage of creating nat on the firewall as against the BGR?
We are facing issue with intrusion policy that is not working as per the configuration. We have a intrusion policy in which multiple signature state are"Drop and Generate Events" and our base policy is "Balanced security and Connectivity". The the in...
To my knowledge Firepower does not use Telnet. When creating a session to the sfr module and running a netstat -an I see the sensor listening on port 23 sfr$ netstat -an tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN Can anyone tell me why this sensor is ...
Hi Guys, we are going to add 1000 Network object to ASA5516 with Firepower on 6.2.I would like to know is this possible? or are there any information about network objects limitation? much appreciate. rgds,Cuong.
I can ping the host that is on the other side of the ipsec tunnel but i cannot monitor it via SLA. PCVST-ASA# ping inside 172.31.56.152Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 172.31.56.152, timeout is 2 seconds:!!!!!Success ...
