Hi, A customer has bought a ASA 5515-X with Firepower Services 6.0.0. I have added the license for the device (VMware with 2 Devices) but he hasnt licenses for the services (URL, etc) When i enable the service policy into the ASA and send the traff...
I have installed FMC and registered 2 SFR module successful. I have also configured ASA to send traffic to SFR for traffic analysis but still I am not able to see any traffic on FMC being analyzed. Below is the ASA config : ASA/act# show service-p...
Dear expert,I have a pair ASA 5525x version 8.6(1)2 running in active / standby mode.I was asked to enable the IPS Module. The scenario is as follows:If you have only one inside network, then you cannot also have a separate management network. In t...
Hello, I have question, and I am hoping this is a not duplicated issue I have ASA5525 with active ports: inside(172.10.1.0/24), outside(10.10.1.0/23), and management(192.168.1.0/23) . I have VPN connection from outside to the inside without problem, ...
I'm trying to setup a 5506-x but unable to reach the internet. When I do a 'show ip', the outside network has 'unassigned' for an ip address. I was hoping someone could go through my config to tell me where I am going wrong. If I can get one interfac...
Is it possible to see client DNS queries? I have security intelligence and dns policy configured so the FTD must be seeing DNS queries right?
Dear Team,Recently we have configured Site-Site VPN on box ASA 5525 to access remote machines via RDP. Is it possible to know how much RAM/CPU would be utilizing for the VPN connection as I have to record for reference? Also wanted to understand how ...
hello everybody I have issue with migration firepower 6.1.0 to 6.2.0 show the following message: Status log:Readiness Check complete with failure log@/var/log/sf/Sourcefire_3D_Upgrade-6.2.0/upgrade_readiness ------ Failure Can you help me ...
Hi Guys, I have a little problem here. It might be an error on my side, but as it is with every error: I have no clue what is actually going wrong. First, what I want to do: I want to be able log into my ASA5510 with Software Version 9.1(7)19, go...
Hi, we would like to implement URL filtering in our enterprise environment without SSL decryption. Can you please share your opinions and experiences about URL filtering impact on firepower resources and traffic itself? Thank you.
I have 2 ISP. I would like to have systems from VLAN1 access the internet through ISP1 and systems from VLAN2 access the interner through ISP2. Can a ASA 5512x handle multiple ISP routing? If so I could use help setting this up. I am not looking for ...
Hi, I have a deployment consists of two policy nodes and two admin nodes. Primary admin node crashed a few weeks ago, i have recovered it and now it is working as secondary admin node now. However, the certificates are disappeared at the second node ...
What are the advantages/disadvantages of configuring Active/Active vs Active/Standby Failover for Cisco ASA 5510?Which one should be preferred over the other?What's the Best Practice followed when configuring failover?-NG
Dear All, In case i want to inspect MPLS-labelled IP traffic, the same way i do inspection for IP traffic. The reason is - to use MPLS VPN between WAN Edge router and my core MPLS router and at the same time to introduce Firewalling function for ext...
Good day. We have SFR module ver 6.1 on ASA 5516-X connected to FMC 6.1. License: Protection+Control+URL+Malware. Firepower User Agent v. 2.3. User access policy uses passive authentication. All users use Win10 domain connected PCs with domain accoun...
