Hello, I am going to implement a pair of FW cluster in Active/passive mode with software Firepower module.Here's what I suggest:- SFR module managed by ASDM - SFR management using interface management0/0 - FW management using inside interface G0/0 th...
When I create a simple FTP entry, this works: object network BH host 99.199.xx.xx ! object network FTP_APACHE01 host 10.10.31.159 nat (inside,BH) static interface service tcp ftp ftp access-list BH extended permit tcp any host 10.10.31.159 eq ftp I...
Hey all, just wondering whether I'm leaving a gaping security hole in my firewall if I configure ZBF manually. When I use Cisco Configuration Professional to (automagically) configure zone based firewall on a router that has a DMVPN configuration, ...
Hi All,I am gettig the below logs in one of my ASA when trying to access one destination IP. I have site to site VPN established from this firewall and have 193.244.75.128/25 added in VPN tunnel encryption. However I am blocking 193.244.75.200/32 th...
Good afternoon guys, I've got an issue with the failover state of my Secondary ASA. Herein lies the problem. I have a Primary / Secondary ASA. I also have a 2960X switch stack comprising of 2 physical switches. I have direct connections from ASA ...
Good afternoon guys, I've got an issue with the failover state of my Secondary ASA. Herein lies the problem. I have a Primary / Secondary ASA. I also have a 2960X switch stack comprising of 2 physical switches. I have direct connections from ASA ...
Hi, I have a unique situation with my ASA5516X with Firepower 6.22. I need to block all the traffic from specific Geo Location while allowing only few know websites from same Geo Location. To achieve that I created a URL list under Objects --> Securi...
Hi all, I've 2 firewall ASA 5525-x with SFR module installed at version 5.4.0. I've tried to update directly to version 5.4.0.11 without success (as reported in release note). So, after checking the release note, I understood thtat I need first to ...
Hi, I was just wondering if there is a way to turn off dedicated to Management on the management port for the ASA 5512? every time I try i get the following error "ERROR: It is not allowed to make changes to this option for management interface on ...
ASA 5515 With FirePower ASA Ver: 9.6(4) Licence: Security Plus Anyconnect Ver: 4.4.03034 Issue: The ASA is used for Anyconnect remote access. This works fine for around 3-4 days and then the clients cannot resolve DNS. The anyconect client is still...
Hello, I have to upgrade cisco ASA from 8.2(4) to 9.1.7.20 or later due to this security bug: CVE-2018-0101 . I found out, there is difference between NAT configuration in old and new version. Q: Are there some additional changes between this versi...
hi folks, I'm wondering if I use same-security-traffic permit inter-interface command at ASA and I have 2 separate interfaces with the same security level and ACL with a couple of explicit permit rules, whether traffic not covered by those permit sta...
I am trying to bypass the Firepower module on my ASA and I'm not sure which command actually accomplishes this. Here what I have in my config: no monitor-interface service-module I also get empty results when I issue the command "show service-pol...
Trying to figure out if the advisory cisco-sa-20180129-asa1 affects my ASAs. I have 5506-X running 9.8(2) running on them. The advisory says that this is fixed in 9.8.2.20. I do not see that version on Cisco's website. Only 9.8.2.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM | ||
| 08-10-2026 08:58 AM | ||
| 08-10-2026 02:48 AM | ||
| 07-22-2026 05:00 AM |
| User | Count |
|---|---|
| 2 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
