Is there a way to override a manual shun with an object group (or otherwise)?I have found that we can override an "automatic shun" using:threat-detection scanning-threat shun except object-group no-shunBut, we are needing a way to override a priviled...
Forum Posts
As mentioned, this is an ASA 5506 running 9.8(1) They both "claim" to be in use if I try to remove either via command line. The object-group is a service, has nothing underneath it (I was able to remove the ports), and does not show up anywhere else...
I have a few ASA5506-Xs, an ASA5508-X, and vFMC. Looking at upgrading from 6.2.0.2 to 6.2.2.0. I browsed the release notes, but I was wondering if anyone has actually done the deed yet?Any "gotchas"?Wanting to get this deployed ASAP, but decades in ...
Recently updated FMC to 6.2.0.1. Estreamer client now only sends 5 or so events and then the estreamer client fails, both on Splunk and host-based client testing. Also, the server does not seem to respond to changes in the event type delivery opti...
Hi Experts,I've been deploying RAVPN multiple times using 2 zone approach (outside and inside) and now I saw this design and I don't know if it will work.Currently, the design has one zone only which is outside zone. Will this work?Thanks
Hello Guys,I was going thrugh documentation for Inline deployment in v6.2.0 and found something about TAP Mode (even though this option is available in previous versions as well). In Inline sets, there is an option called TAP Mode which says that the...
I tried to generate a rather simple report on a DC1500 for the previous calender month.The report should contain a summary of the connection events based on the action, Trust, Allow, Block. The connection event database contains that information, how...
Hello Friends, I was try to upgrade ASDM version from 7.1(5)100 to 7.8.2. But upgrade process is aborted due to "Invalided http response” related issue. However i was finished ASA software upgrade without any issue under ASDM version from 7.1(5)100 ...
Resolved! upgrade ASA-5516 to 6.2
We have many pairs of ASA5516 Firewall devices running 6.1 and want to upgrade to 6.2. With that some questions later, I look forward to helping everyone.1. Is there a way to backup override object the ASA5516 device?2.In case of upgrade failure, how...
Hi guys, I have a 5545x with an 1 Gig internet connection running IPS, URL, and AMP. When running speedtests, it causes latency for other users (200ms-400ms). I am running into this issue: http://www.cisco.com/c/en/us/support/docs/security/firepower...
Hey all,got the following problem:We got a new ASA 5512 (9.1(2)). Since using the new ASA RDP over VPN is slow as hell. Furthermore we are hosting services for our customers at our local site. The customers access their servies via https and they rep...
Resolved! ASA failover Active/Standby
Hi, We have configured failover (Active/Standby) between our 2 ASA firewalls using the configuration giving below. We have tested the failover by power down our Primary ASA (ASA-1) firewall and our Secondary ASA (ASA-2) is become Active. But, the se...
HI Currently i am using ASA 5506 FTD appliance for a POC using evaluation smart licensing . My Smart licensing is getting expired for the FTD in 2 days. The FMC classic license is having validity of 25 days . My query is that is there any way to e...
Is there any idea when 6.2.2 will be released?
I have a site-2-site VPN tunnel setup. I appear to be getting one way traffic, because I get deencap, but not encaps. After looking at the packet tracer I see that the Phase3 step of NATing is using the wrong nat statement. I believe that using the n...
