We have an ASA-5506 with 3 interfaces active - 1 outside pointed to the public IP range, 1 inside pointed to the primary internal network (10.1.1.1) and 1 inside2 pointed to a secondary internal domain / network (10.10.10.1). There are static routes ...
Forum Posts
Hi all, We want to allow VNC on it's standard ports. I tried with VNC app under application detectors and can see the internal detector for VNC application is enabled but looks like we cannot see the information of an internal detector. Is there an...
Resolved! Firepower 2100 running Transparent Mode
Just wondering if the 2100 Firepower appliance is running in transparent mode and we allow all traffic through, how does it protect the traffic from malicious activity?
There are 2 ACAs in active passive modeI can not ensure the high availability of two firepower modules. He got both in Cisco Firepower Management. Accordingly, the traffic goes on one module, the other is in an error state: "Interface 'DataPlaneInter...
Hello, I read a lot on here, and as I was not able to understand what I am doing wrong... I am opening that discussion. We have an ISR4331 and a ASA5508 and this is what we are trying to achieve : The outside interface of the ASA is - for now - con...
Today we experienced something weird. We have 2 ASA5515's in failover state. Checking the logs, every failover check was fine until the secondary reported "Ifc Faillure". After that our Active unit also became "unresponsive"from the network (both uni...
Hello,I want to change the timerange with REST. My problem is that when I send my JSON via PUT, the time at value. start and value. end is changed. I've entered 16:15 as time, and in the ASA only 04:15 arrives.What's the mistake here?Here my JSON-Str...
Hi, For one of our customers, we are trying to use Paging Application (Informacast) over WAN to multiple sites, which requires Multicasting to be enabled over the WAN links and LAN links. We have enabled ip multicast-routing & pim sparse-dense-mode...
Hi All, I have a customer who is looking to install Content Security Management Virtual Appliance. The customer has the SMA-EGMT-LIC for email reporting. But do we need any host license for the virtual appliance itself?. As per the below document (...
hi, i have an internet circuit directly terminated on ASA 5525-X that is running in single mode. site-to-site ipsec VPNs tunnels and NAT services are running on this FW. recently there are a number of customer sub-interfaces being added and i'm cons...
Hi all I'm in the process of upgrading the firepower software on a Cisco 5525-X. I have updated the boot firmware to 6.2.2. Once I get into the module using the module sfr command i then enter setup to configure the ip address for the firepower mod...
Hello ! I am doing NAT lab in GNS3 with ASAv & trying to allow web server in "dmz" zone access from "outside" and "inside" zone by using "object nat". But both outside & inside failed access to DMZ's web server. The acls are already in place. I've ...
Hi folks, I have 5 of Cisco CMTS in my LAN with private ip addresses of course. The company I work for hired another company in order to monitor (SNMP) those 5 CMTS and they asked me for a public IP address and port forwarding to add CMTS's to their ...
Resolved! Problem Licensing ASA 5505
HI!I have a cisco 5505. I bought the cisco asa 5505 with base license.First I bought and install a "L-ASA5505-10-UL= ASA 5505 10-to-Unlimited User Upgrade License" and then I bougth and install a "L-ASA5505-SEC-PL ASA 5505 Sec. Plus Lic. w/ HA, DMZ...
I know it is possible to set minimum password length on these devices, but can we configure password complexity options for local accounts on an ASA 5508 and/or an IOS router (i.e. ISR 4321)? I am in the middle of an audit, and need to provide offi...
