Welcome to the Cisco Community Ask Me Anything conversation. Submit your questions from Wednesday, March 4, 2026 through Wednesday, March18 2026. Our Experts Ike Chon, Scott Nishimura, Annya Martinez Foster, Jyhan Ocana Casillas, Eder Pacheco, Willi...
Forum Posts
hi, I did enable netflow to see the traffic using PRTG but all I am getting from asa is templates .. I did capture 128 packets using wireshak what I have is only this .. can anyone help thank you
Hello !I'm looking for the end of support for each Cisco Adaptive Security Appliance Software version.In my example I'm running 9.4 version on ASAv. I find nothing about this version about end of support.I checked on theses pages but I didn't find cl...
Hi! i noticed that in Firepower Threat Defense Images deployed via FMC, there is no NO-NAT Statement in the FMC Nat Policy needed to allow traffic between subnets. I´m questioning myself how this is configured from the FMC to ASA-OS because if i do...
Hello Guys, Is there any way to check what type of password in the ASA is configured whether its is type 5 or type 7, also do we have a option for to configure type 8 or type 9. Thanks in advance
Dear All, I have ASA 5506x (Firepower) firewall. we have multiple public servers inside network. i have configured public server in firewall in "PUBLIC SERVER" section against live IPs. all are now accessible from outside on specific ports. the issue...
Hi everyone, Our ISE System certs used for Admin, Portal and EAP are about to expire for 2x PAN and 2x MNT nodes, while all PSN nodes are OK. From what I've read I have to generate CSR's for these 4 nodes only and then bind the certs received from ...
Resolved! Software FirePower management 0/0
Hello, I am going to implement a pair of FW cluster in Active/passive mode with software Firepower module.Here's what I suggest:- SFR module managed by ASDM - SFR management using interface management0/0 - FW management using inside interface G0/0 th...
Resolved! Allowing encrypted FTP traffic
When I create a simple FTP entry, this works: object network BH host 99.199.xx.xx ! object network FTP_APACHE01 host 10.10.31.159 nat (inside,BH) static interface service tcp ftp ftp access-list BH extended permit tcp any host 10.10.31.159 eq ftp I...
Resolved! Zone Based Firewall/DMVPN Configuration
Hey all, just wondering whether I'm leaving a gaping security hole in my firewall if I configure ZBF manually. When I use Cisco Configuration Professional to (automagically) configure zone based firewall on a router that has a DMVPN configuration, ...
Hi All,I am gettig the below logs in one of my ASA when trying to access one destination IP. I have site to site VPN established from this firewall and have 193.244.75.128/25 added in VPN tunnel encryption. However I am blocking 193.244.75.200/32 th...
Good afternoon guys, I've got an issue with the failover state of my Secondary ASA. Herein lies the problem. I have a Primary / Secondary ASA. I also have a 2960X switch stack comprising of 2 physical switches. I have direct connections from ASA ...
Good afternoon guys, I've got an issue with the failover state of my Secondary ASA. Herein lies the problem. I have a Primary / Secondary ASA. I also have a 2960X switch stack comprising of 2 physical switches. I have direct connections from ASA ...
Hi, I have a unique situation with my ASA5516X with Firepower 6.22. I need to block all the traffic from specific Geo Location while allowing only few know websites from same Geo Location. To achieve that I created a URL list under Objects --> Securi...
Hi all, I've 2 firewall ASA 5525-x with SFR module installed at version 5.4.0. I've tried to update directly to version 5.4.0.11 without success (as reported in release note). So, after checking the release note, I understood thtat I need first to ...
Hi, I was just wondering if there is a way to turn off dedicated to Management on the management port for the ASA 5512? every time I try i get the following error "ERROR: It is not allowed to make changes to this option for management interface on ...
