Hi All, I was testing a new access control policy with a single rule that permits ICMP application traffic from my inside network to the outside (see attached screenshot). As expected, ICMP traffic such as ping, traceroute etc works without any i...
Forum Posts
Thanks for reading, I have an ASA with Firepower and have setup Malware protection and URL filtering and all looks good from the monitoring in that I'm seeing threats detected and mitigated - Image attached. I have 3 questions so any help appreciate...
Hi , Friends ! i am using ASA Active and Active Failover Design the Issue is that when both ASA Firewalls are powered off and i Power on Only one ASA at the time the ASA is waiting for more than 20 mins and shows all interfaces as act/sec/SRV...
All, I am trying to delete an object network that has a static NAT in it but the ASA keeps saying it is in use. What do I need ot delete first so that I can remove the object network? Thanks, All replies rated
Hi Cisco Experts, We have recently replaced our standby ASA5520, the failover was turned off on the primary box during the replacement being fitted(this is where we think our mistake has happened!!!). Once we had the upgraded the standby asa to 9...
I have a Cisco 2851 with a NME-IPS-K9 module in it My normal speed is 118Mbps download As soon as I add the line ids-service-module monitoring inline access-list 101 my speed drops to 30Mbps download and this is with all of the inspection settings ...
Hello I currently have an ASA5505 running Version 9.1(6) The outside interface of the firewall is connected to ADSL router which in turn is connected to the internet Every now and then...the connection drops and i am not able to ping the ADSL modem...
Hi All, Seeking some logic as i going to configure this scenario soon scenario: User connecting using AnyConnect client to ASA-HQ outside inteface So it will grant a DHCP IP pool My question How do i able to access the ASA-HQ ASDM, say it enabl...
Resolved! ASA5506-FPWR-BUN
I was wondering if anyone could tell me what this bundle includes with regards to subscriptions?ASA 5506-X with FirePOWER Svcs. Chassis and Subs. BundleDoes it include the URL, IPS and / or AMP subscriptions?thanks
Resolved! object groups in ACL
i use object groups for my cisco 1800 routers. the egress acl has a line (shown below) that permits staff to initiate remote desktop (RDP) connections from their computers on the office network vlan1 to any other computer. permit object-group rdp_po...
Hi, We installed a Virtual FMC and added an ASA-5508-X FTD. This worked fine. But the problem is that when deploying any new setting to the FTD, the deployment fails with error "failed to read the module pack files" and "Deployment failed due to fail...
I have installed Virtual Firepower Management Center with version 6.2.2 and i have two physical FTD 4110 but i enabled evaluation license on FMC to manage both FTD and now evaluation period near to end and i didn't purchase license for virtual Manage...
We are running FMC virtual 6.2.2. I am trying to implement External Auth under Users > External Authentication, but it looks like the Base DN and the Filters don't like groups containing spaces (e.g. CN=Some_Group,OU=Security Groups,OU=Level,DC=Doma...
Hello!I have an ASA5506X with FirePower: ASA version 9.8.2.15, ASDM version 7.8.2.151, FirePower version 6.2.2.1 (Build 73).The Default system policy does exist, but I can't change it ( please see attached screenshots). I have got the Invalid object ...
Hello, We have a Firepower Cisco for WEB Filtering, we have some Policies created already, but I want to Exclude an specific Host or IP, I tried to add the Rule on Access Control Policy as following (1st Rule) but it does not work, still blocking m...
