I am currently up for license renewal for Cisco ISE. I notice there is not advance license anymore. Is this replaced by the APEX license? Do I need PLUS license if I have APEX or do I need both? I use Cisco ISE for both posture and profiling.
Forum Posts
We are running CLNS ISIS, between two routers, we are inserting ASA in between to act as L2 FW. I know starting version 9.5, ASA supports ISIS. We had to add "ethertype permit any" rule at the end of the ACL to make ISIS works. But we are trying ...
Resolved! 5506-X FTD not NATing 1 vlan.
So, I'm confused here, but I set up a 5506 FTD for my church with 5 vlans. originally 192.168.10,20,30,40,50. Due to legacy hard coded devices I changed vlan 30 to the old legacy 10.10.0.0/24. Now, 10, 20, 40, and 50 can NAT out to the internet f...
Hello all, I have a pc that is unable to access a couple of websites, others on the same LAN are able to via the same Cisco 5505 ASA. I have The sites in question are hosted at the same location via a DMZ on the asa. I have connected the pc to mo...
i am having issue with ip address configuration. i have firewall active and standby 5525-x and we bought software module firepower so i am trying to configure that. i have port channel configuration in asa and management port was not used before now ...
I’ve searched and searched and searched, and I can’t find this particular configuration discussed anywhere… My predecessor entered this NAT into our Cisco ASA: object network obj-10.1.0.10 nat (inside_academic,outside) static 50.201.x.x no-proxy...
Hi I will be installing FirePOWER (SFR) Services on ASA 5585-X SSP-10 module I have ssh session to ASA but I am unable to get a response from the SSP-10. From the details below please can somebody tell me why I am having this issue and how it can be...
Hello, everybody, I need to convert ASA5525-K8 into ASA5525-FPWR-K8. A customer has bought simple ASA5525-K8 and now he needs Firepower services. Am I right that the only things he needs to enable Firepower on his ASA5525-K8 are: ASA5500X-SS...
Hi, I have a requirement to upload the below snort rule to my sourcefire platform: any any -> any any (msg:"Malicious SSL 01 Detected"; content:"17 03 01 00 08|"; pcre:/\x17\x03\x01\x00\x08.{4}\x04\x88\x4d\x76/"; sid:9999998;) However I keep ge...
Resolved! ASA 5506-X HA options
We can see in the datasheet that the ASA 5506-X supports HA as Active/Standby.Does this model of ASA also support cluster? Does it need the security+ license in order to use A/S?
Dear Experts, I am planning to ASA hardware migration from ASA 5510 (ver 8.2) to ASA5516-X (ver 9.6). I would like to get your help/advise for my migration. 1) what is the best way of this migration fro 5510 ver 8.2 to ASA5516-X (ver 9.6) 2) Is th...
Resolved! Certificate expiry for ssl vpn
Hi For remote ssl vpn, if we dont use certificate based authetication ( we use Radius for authetication), will my ssl vpn not work for users if an identitiy certificate expires?? I thought users would just get a warning page before he/she connects to...
Resolved! Cisco firepower 2130 and 3925 router
Hello, trying to understand if a 3925 router is needed if a 2130 firepower is in place for network protection and why or why not? Thanks.
Hi Everyone I have just been given a pair of 5515X firewalls which the company would like to use. We publish RDS connections to a single WAN IP (1.2.3.4) using different port numbers. Internal servers (Range 172.16.0.0/16) keep the same port of 338...
Hi, In the case of multiple sub-interfaces with the same security level, I only want specific ones to talk to each other. Would a ACLs be used in this case? Also, would there be any need to NAT the traffic? Is there any specific licensing requi...
