i want to make sure i get this because it's driving me a bit mad. class-map ftp match port tcp eq 21 class-map http match port tcp eq 21 [it should be 80] policy-map test class ftp inspect ftp class http inspect http This example on Cisco's ...
Forum Posts
Hello All, Cisco ASA version 9.8(2), ASDM: 7.8(2) NAT forwarding working, but if is NAT forwarding enabled : 1. I don´t have access via logmein from outside(internet) to that server, there is access only via port which is defined in NAT forwar...
Hi Folks, I have the following scenario: I already have a NAT rule in ASA to access port 84,1157 on Server from Internet through public IP. In order this thing to work I already made a port-forwarding in the 1841. So far so good. Now I need to estab...
It is very strange, so I am in the GUI, I right-click an ACL entry, click apply, but as I am going along removing entries, it will seem to default back to how it was or something. ACLs that I deleted return. I apply my changes, even save at the CLI....
Hi everyone, I'd like to update the software version of my active/standby firewall pair. At present the FW SW version is 9.8(1), ASDM is 7.8(1) I found the latest version on Cisco website is 9.9.1(for 5525-X), 7.9(1) for ASDM. Here's my questions...
Hello, Recently I got a strange message in the FW ASA log like this: drop rate-1 exceeded. Current burst rate is 2 per second, max configured rate is -4; Current average rate is 9 per second, max configured rate is -4; Cumulative total count is 110...
Hi Experts We've an ASA configured with Multiple security contexts and we're unable to login to Admin/System context but we're ABLE to login to other security contexts using TACACS. Please let us know for any output if required. Cisco Adaptive S...
As i uploaded the ios on flash but it is still goin on to rommon mode as it also shows me while booting that "booting image not found rommon #1> rommon #0> confregInvalid or incorrect command. Use 'help' for help.rommon #1>rommon #1> Current Config...
Resolved! Firepower Sensor distribute deployment
I would like to deploy a FMC at HQ site, and with firepower sensor(firepower appliance, asa with firepower service, ftd) deploy at remote site, is there some prerequisite to meet this deployment requirement ? such as: 1.HQ site and remote site minimu...
Hey Guys, We have an FP2110 with FTD which is currently deployed and in production. Currently the appliance is on site and the FMC is hosted at a data center connected via a site to site vpn. My question is what if you made a mistake on configura...
After I upgraded my FMC to 6.2.0 version, when second user try to login into FMC (WEBUI) it shows "Existing session detected , You are already logged in as this user.Do you want to proceed and terminate previous session?"
hi When I land THE ASA 5525 with consule, I can see some loop alarms (Fail to verify and insert CRL). at the same time, I couldn't through remote SSH to the firewall. Why does this alarm come up ？How to reslove it ?The attachment is show tech,loo...
The release notes for this upgrade are very clear and jump around a lot. I just want to double check my logic. FMC@5.4.1.6 and Sensors at 5.4.0.7. Is this the proper order to upgrade the FMC and do the hotfixes need to be installed? Also at what ...
Hello, We are getting ready to deploy FP2130s with FMC. If the FMC is unavailable, how are changes made (especially in emergencies)? Looking at the getting started guide (https://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/fp2100/f...
We are currently using 802.1x with EAP-TLS machine based authenctication and every cisco example has the IP address when you do a show authentication session interface command. Our's shows up as Unknown for the IP address. We authenticate through ACS...
