Hi All, I am migrating ASA configuration to FTD. Please help me to know how can I use the FlexConfig template to migrate ASA WCCP config to FMC. ! ASA Configuration: access-list wccp-users extended permit ip host 192.168.111.136 any access-list wccp-...
Forum Posts
Hi. The Cisco Firepower 2100 Series appliances with FTD can be deployed as a Next-Generation Firewall (NGFW) and as a Next-Generation IPS (NGIPS) at the same time? Rgds
Hi All, On my ASA 5525-X i am using three Zones with DHCP is running on Inside Zone. I am getting strange problem as my inside zone is disconnected. Now my inside ASA ip address (192.168.2.2) is not pinging and DHCP stop giving ip addresses. Now ...
Resolved! Dual ISP NAT Statement for One Server
Hello all, I have a single ASA 5512-x Firepower Edition running firewall IOS 9.6(3)1. We have dual ISPs. ISP1 and ISP2. These links are not setup in an active\standby failover config. ISP1 is the default route out. Everything uses this as its i...
Resolved! Firepower License
Hi, A customer has bought a ASA 5515-X with Firepower Services 6.0.0. I have added the license for the device (VMware with 2 Devices) but he hasnt licenses for the services (URL, etc) When i enable the service policy into the ASA and send the traff...
I have installed FMC and registered 2 SFR module successful. I have also configured ASA to send traffic to SFR for traffic analysis but still I am not able to see any traffic on FMC being analyzed. Below is the ASA config : ASA/act# show service-p...
Dear expert,I have a pair ASA 5525x version 8.6(1)2 running in active / standby mode.I was asked to enable the IPS Module. The scenario is as follows:If you have only one inside network, then you cannot also have a separate management network. In t...
Hello, I have question, and I am hoping this is a not duplicated issue I have ASA5525 with active ports: inside(172.10.1.0/24), outside(10.10.1.0/23), and management(192.168.1.0/23) . I have VPN connection from outside to the inside without problem, ...
Resolved! 5506-x wan via dhcp
I'm trying to setup a 5506-x but unable to reach the internet. When I do a 'show ip', the outside network has 'unassigned' for an ip address. I was hoping someone could go through my config to tell me where I am going wrong. If I can get one interfac...
Is it possible to see client DNS queries? I have security intelligence and dns policy configured so the FTD must be seeing DNS queries right?
Dear Team,Recently we have configured Site-Site VPN on box ASA 5525 to access remote machines via RDP. Is it possible to know how much RAM/CPU would be utilizing for the VPN connection as I have to record for reference? Also wanted to understand how ...
hello everybody I have issue with migration firepower 6.1.0 to 6.2.0 show the following message: Status log:Readiness Check complete with failure log@/var/log/sf/Sourcefire_3D_Upgrade-6.2.0/upgrade_readiness ------ Failure Can you help me ...
Resolved! ASA 5510 getting file via HTTPS
Hi Guys, I have a little problem here. It might be an error on my side, but as it is with every error: I have no clue what is actually going wrong. First, what I want to do: I want to be able log into my ASA5510 with Software Version 9.1(7)19, go...
Hi, we would like to implement URL filtering in our enterprise environment without SSL decryption. Can you please share your opinions and experiences about URL filtering impact on firepower resources and traffic itself? Thank you.
I have 2 ISP. I would like to have systems from VLAN1 access the internet through ISP1 and systems from VLAN2 access the interner through ISP2. Can a ASA 5512x handle multiple ISP routing? If so I could use help setting this up. I am not looking for ...
