Network Security

Resolved! Should I remove 'xlate per-session' ASA commands

hi, i've upgrade an ASA to 9 code and it generated these lines. do i need these? is it safe to remove them? xlate per-session deny tcp any4 any4xlate per-session deny tcp any4 any6xlate per-session deny tcp any6 any4xlate per-session deny tcp any6 a...

ASA 5520 OSPF Routing

Hello I'm trying to figure out if I need any access-list or NAT rules in order to communicate with networks advertised over the OSPF configuration. I have a third party connection coming into my Cisco ASA 5520. Please refer to my configuration below...

Resolved! Cisco Firepower 9300 with ASA OS

Hi Experts Could you confirm the HA setup options applicable for Cisco firepower 9300 chassis (SF-F9K-FXOS2.0-K9) running ASA OS (SF-F9K-ASA9.6.2-K9)? Native ASA appliances had active/standby and active/active options, depending on single or multipl...

Resolved! Cisco FirewPOWER Update fails after 6.1

I have Cisco ASA 5516X with FirePOWER services. I received the FirePOWER running SFR 5.4.1-211. Via CLI - I performed a reimage of the device to upgrade the boot image and the software to 6.0.0-1005. Via ASDM - I was able to use the update feature to...

ASA versions selection

Hello, Just wondering what version of ASA code people are running. I work for a large company that has a lot of diff. 5500 model firewalls and ASAv firewalls and running code all over the place. From 8.x to 9.3 to 9.5 to 9.6 and more. Im trying to f...

ASA 5500 AIP SSM Shutdown

This is a followup to my related question /discussion/13270026/removing-aip-ssm-10-asa5510 I wish to to test the performance of my aging 5510 WITHOUT the AIP SSM-10 module. Will using the module shutdown command be sufficient? Thank you for your t...

Cisco FirePower User Agent for AD problem

Hello, I'm trying to deploy Identity Sources with my FirePower Management Center virtual version 6.1.0.1. I configured the user agent IP in the FMCv. I installed the user agent version 2.3-10. The user agent is installed on the AD-DC and the conne...

Cannot apply Access control policy to sensor

I've a FirePower 7110 that could not take in access control policy from my Management center. FirePower version - 5.4.0.4 Management center - 5.4.1.4 I'm getting this message when applying the policy from management center: "Access Control Policy ...

Creating ASA Inside interface failover &/or redundancy

Which is the best way to configure the ASA for the following desired output: We will have 2 3850 switches in a stack running multiple VRFs which will use the ASA as their gateway. We do not want to send a single link to the INSIDE interface. That ma...

ASA 5505 Unable to ping internal via Anyconnect

Hello, I have an old ASA 5505 I am trying to setup with AnyConnect for SSL and IPSec with AnyConnect client but I am unable to ping anything on the inside network. IP Pool 10.0.11.X Internal 10.0.10.X External 1.2.3.4 ASA Version 9.2(2)4 !hostname ...

Resolved! ASA FP Service IPS 3Y-Subscription license

Hello, We buy a brand new ASA 5525 with FP service (Bundle) with L-ASA5525-TAM-3Y to have the IPS/App/AMP services for 3 year. After installation I can’t find any info about the IPS expiration date on FMC. The license section of FMC only show the ...