hi everyone,I have ACL on the ASA that allow TCP connection between two networks. It works well, but sometimes ASA block this rule and I have to off und on this rule. Done it works again. I think it is because the TCP Stack between hosts in the netwo...
Dear All, I am currently working on a client and their requirements are below. quotes in bracket will tell you what I have acheived yet 1) Url blocking (acheived) 2) Facebook videos and games only (unable to acheive) 3) torrent block (unable to achei...
We are using a Cisco ASA and the following started yesterday: One of our users was locked out of our retirement plan admin site. When we called, we were told they blocked our access because the IP we were coming from was in Japan. After some i...
I have added TAM= license (AMP & IPS) with firepower. IPS license is not shown in FMC dashboard. But AMP license is successfully added and its showing dashbroad. What is the actual problem ? Please give me advise to resolve the problem.
Please help as I am trying to understand what kind of layer 3 traffic are process, since Isolated vlan hosts only talk to Promiscuous port and hosts within a community vlan (do not talk to hosts in other community vlan) but can talk to each other and...
Hello All, We are using Cisco ASA with FTD 6.2. While we are tring to ping any hostname on internet like "google.com"we are getting reply unknown host since DNS servers are already configure. however we are getting ping reply to global DNS servers ...
Hello Team, I am deploying ASA 5508-X with FirePOWER services. Inside data interface is connected within network. Managment interface is not conencted within the network. But i want to access SFR without Management interface. 1. is it possible to acc...
Hi, Im unable to traceroute to public domain like google.com to check the connection from inside interface, im not sure which is blocking it. can you please share what ports to be opened? Thankyou.
Hello I just attempted to move a couple of VRF vlans from an ACE module to an ASA module but for some reason the vlans were showing as 'down' on the ASA: al1asam/act/pri# sh int vlan 2100 Interface Vlan2100 "", is down, line protocol is down Hard...
Hi, I'm currently installing a FireSIGHT virtual appliance in order to manage 2 ASA's with FirePOWER services installed.My Defense Center is properly licensed, using the PAK key I got.I bought 2 IPS subscription licenses for both ASA's. I configured ...
I have a 5506X connected to a 200mbps cable pipe. When i run speed test i cap at just under 100mbps. If i connect with a laptop direct to the cable modem I get just under 200mbps. I am not using any of the Firepower features. Is there anything I nee...
Hi. I have an ASA 5508-x connected to two ISPs. I made the relevant configurations of the static route with superior metric of SLA monitor, Track ID and the IP tracking address 8.8.8.8. When I did the backup tests of ISPs, they worked fine by disconn...
Hello, I am migrating from a faulty ASA 5555X to a replacement. I would like to swap the two from a remote location (no HA). The only caveat is that the faulty ASA has two mirrored 120GB SSD's and the replacement does not. FirePower is not runn...
Cisco licensing provided me an IPS license, I installed it but IPS is showing it as an expiredLicense(with no expiration date). Now I got a new license (with expiration date) but now I cannot install it (see attached error). I need to reset or delete...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 09-22-2026 04:13 PM | ||
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM |
| User | Count |
|---|---|
| 3 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
