Hi, we would like to implement URL filtering in our enterprise environment without SSL decryption. Can you please share your opinions and experiences about URL filtering impact on firepower resources and traffic itself? Thank you.
Forum Posts
I have 2 ISP. I would like to have systems from VLAN1 access the internet through ISP1 and systems from VLAN2 access the interner through ISP2. Can a ASA 5512x handle multiple ISP routing? If so I could use help setting this up. I am not looking for ...
Hi, I have a deployment consists of two policy nodes and two admin nodes. Primary admin node crashed a few weeks ago, i have recovered it and now it is working as secondary admin node now. However, the certificates are disappeared at the second node ...
What are the advantages/disadvantages of configuring Active/Active vs Active/Standby Failover for Cisco ASA 5510?Which one should be preferred over the other?What's the Best Practice followed when configuring failover?-NG
Dear All, In case i want to inspect MPLS-labelled IP traffic, the same way i do inspection for IP traffic. The reason is - to use MPLS VPN between WAN Edge router and my core MPLS router and at the same time to introduce Firewalling function for ext...
Good day. We have SFR module ver 6.1 on ASA 5516-X connected to FMC 6.1. License: Protection+Control+URL+Malware. Firepower User Agent v. 2.3. User access policy uses passive authentication. All users use Win10 domain connected PCs with domain accoun...
I have a 5508-x running a remote office with servers in a DMZ, a guest network, and site to site VPN back to our headquarters. I'm running into a problem where the DMZ servers cannot access the internet. The servers are operating normally otherwise...
I have a Cisco ASA 5512-X connected to two ISPs. The "outside" interface is our main ISP and the "cable-modem" is our second ISP that people on the guest lan will use for internet access. The default route points traffic through the outside interface...
Hi, I cant ping outside interface of asa firewall . What needs to be checked Thanks
I am receiving this error when performing a packet trace on my ASA 5505. It is pointing to a dynamic nat rule on my outside interface to my public IP as to the reason for the drop. Not sure why this would stop the traffic. I have an access rule to...
Hello Everyone, Greetings !! I have some questions in my mind and I was hopeing if you guys can answer. 1) Say you have to create IPSEC VPN between two FW, but say FW 1 sit behind NAT device and you need to enable NAT-T on it but FW2 has direct...
Resolved! ASA Future
Haven't been able to get a straight answer but what is the future of IOS/CLI on the firewall appliances?
Hello, I have come across some issues loading a config onto an ASA5515 device. The device is used to allow 4G Android device access to a small network. From factory default the ASA is given a base config which basically just ip's an interface, from t...
As the title states I'm running into a bit of an issue getting my outside traffic in a different subnet to talk to my devices behind the ASA. The background for this is that I want a test environment in my corporate environment which still has acces...
Buen dia.Tengo un CISCO Firepower 2110 administrado a través de FDM y necesito hacer conexiones VPN a sitios remotos que tienen enlaces de internet con IP privada. Estos equipos remotos son ASAs y Routers, ademas el ISP otorga en el sitio remoto una ...
