Hi I have a new ISR4321 router which is replacing an ISR877. The ISR4321 has two IPSEC over VTI connections to two other ISR's. The ISR4321 is unable to establish IPSEC over VTI, but simple GRE over VTI works fine. The ISAKMP response on the remote I...
Hi, I'm looking for a decent book on a Asa 5506-X with Firepower services (preferably with configuration examples). I've looked around but can't seem to find one. There's a good amount of books available on Asa's but they are either outdated or not...
Hello, I'm getting the following errors when trying to perform a software update from our centralized Cisco FMC to a Cisco 5508-X FTD appliance. Trying to update the FTD to version 6.2.0.2 from 6.2.0. Error1: <MGMT_IP> : Unknown fatal error : Executi...
What's the best way to crate a second VLAN on a 5506? Client has a 10.1.1.x subnet setup on interface 1/2 (inside) with interface 1/1 (outside) holding the public IP. Now they have a second domain on a 10.10.10.x subnet that will need internet access...
Hi guys, A new ASA configuration and i'm witnessing a very strange issue. I've two interfaces. Interface 1 (security level 0) and interface 2 (100). I've an IMPLICIT deny configured upon both interfaces. There is no RDP access allowed through in...
My company has a new cloud practice and are using multiple context ASAs for different tenants. The customers do not manage the contexts, we do. As of right now, the way we manage the customers contexts is by SSHing into the Admin context then we do ...
With Prime 3.1 is it possible to setup an alarm that will notify you when a wireless client disconnects from the wireless network?
Need some assistance with the new ASA-5506X for my home network. For some reason, i can no longer access the FirePower module via the ASDM. ASDM starts to load at stops at 17% (Initializing FirePOWER communication). Here is the error:Cannot connec...
Hello,if I buy a ASA with FirePOWER Service (e.g. 5516-X) which licenses do I need to buy?As I understand I have to order a license for the FirePOWER Service. E.g. IPS, URL and AMP.Do I need to order a FireSIGHT Management license, too? Is the FireSI...
Hi,I am having two dc switches with FWSM modules installed. DC switch1 FWSM (Ver 3.2(12) is wokring as active and Secondary DC switch2 FWSM (ver 3.2.(12) is in standby mode.From yesterday I am trying to login primary FWSM, It is accepting my use...
Hi all, I am trying to re image the firewall 5506-x with firepower services. Currently my firewall has this IOS insataaled: asa961-lfbff-k8.SPA. i configured it and it was working fine (No Firepower services yet). after approx one month of configurat...
Hello, Suppose we have two NAT rules under 'NAT Rules'; # Type Original (Source) Original (Destination) Interface (Translated) Address(Translated) 1 Exempt ANY ANY ...
Good evening - I'm receiving the following error when trying to remove wccp and reconfigure it: ERROR: Can't change redirect-acl, first remove wccp configuration and re-enter with new redirect-acl. I was running version 9.8(1), and I ran across a ver...
Hi, I need some clarification on the dependency of the firepower management console with regard to the sourcefire sensors. What is the expected behavior when the FMC is offline? Today we started experiencing failed connections and latency to an spe...
Hi guys, Consider the following topology: Let's say PC1 is my "management" device or network. - Both ASA's can reach eachother over the 2 different VLANS. - The ASA's each "represent" 1 datacenter. Now there is the following issue if i want to ...
