Hello, Question about configuring an Active/Failover build We already have a 5545 in place, configured and running, but it is a single unit, with no redundancy. I want to explore adding another node and re configuring, this and the new firewall i...
I am trying to read the capture output that I am getting. I know that the S=Syn, A=Ack, P=Push (What does PUSH mean?) but what does a dot (.) and a F stand for. I am using the command show cap capin to get the information. 116: 08:41:51.820514 8...
OK, I have a lab FW where both interfaces are security level 0 and there are no ACLs applied to any of the interfaces (inside, outside), and there are Global Policy inspection_default rule actions for common protocols such as SIP, ICMP, FTP, etc., t...
I have a customer who are running Cisco ASA version 9.6.2 software. When I look at the afftected software versions for Cisco bug ID CSCvd78303, the 9.6.2 code train starts with version 9.6.2(1). Does this mean that version 9.6.2 is not affected?
Hello Experts, I am facing high cpu on firewall, one of the process called "Integrity FW Task" consuming 80%. even after reboot of firewall and with less traffic this process is staying high. any one know what is this process and its roll. please gui...
I tried to use the switchports, as in asa5505 vith one Ip address. It will only success with BVI interface and bridgegroups. But I cant use dhcprelay to my server on remote network. Is it possible - somehow
Circling back around on this topic, I have a number of legacy 7120/8250 devices that I would like to collect historical data on, more specifically CPU, interface stats, connection stats, etc... I'm not overly excited at the reporting capability for...
Dears, https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/116111-11611-config-double-authen-00.html#anc7 I m following the above link for anyconnect client vpn double authentication, but the documents is not cle...
Hi, Can soneone please share their design experience for physical connectivity between 2 redundant core switches to one firewall to 2 redundant aggregation industrial switches? Can we connect directly to firewall as shown in attached?
Hi, Im trying to configure a TenGig interface as a failover/link interface on a ASA5585-SSP-10 but it gives me the error "Cisco ASA - ERROR: Cannot change a shared interface". A 1G interface works well. What could be the issue?
Hello, I am trying to use a timerange to setup a any any block on my inside interface. This appears to work pretty well as when the time starts it is not possible to start a new connection. However existing connections appear to not get dropped. F...
Hi, Which will be the correct appliance from FPR series for below requirement. All NGFW features. User sizing - 200 users. Concurrent sessions:- 1 Lac
Hi, I have used 2 local SPAN sessions available on 6513. Can I use inbuilt wireshark feature (monitor capture) to capture traffic?
I'm having issue accessing the published application at DMZ via ASA2 at DC2. See screenshot below. I have no issue accessing any DMZ application via ASA1. No problem accessing any application in ASA1 at DC1. Communication is fine, I can ping 10.x....
ASA 5555, IOS 9.2 using ASDM 7.2 I have tried everything I can think of and cannot get incoming traffic to get through my rules.I stripped it all down to one rule and still no luck. I know its something basic but I just don't get it.When I run a pa...
