Hi AllI cannot get SSH enabled on a cisco950032QCcat9k_iosxe.17.09.05.SPA.confi have created a domain name, reset the cryptokey (crypto key zeroise) and generated a new key, yet ssh is disabledhostname#crypto key generate rsa modulus 2048% You alread...
Forum Posts
Cisco ISA 3000 appliance comes in two types, one which supports 4 copper ports (ISA3000-4C-K9) and one which supports 2 fibre and 2 copper (ISA3000-2C2F-K9). We have purchased the latter one. My colleague raised a concern that in some cases, we can e...
Does anyone have a tested and successful procedure to onboard an HA pair of FTD devices (already set as active/standby via FDM)?I've been in a pilot program of CDO for several months (the first few spent fruitlessly gaining access to CDO).I've been t...
Resolved! SGT as destination in firewall rule
Hi,We are in the process of implementing SGT based rules in our FTDs. Our FMC is integrated with ISE successfully and we retrieve SGT information normally.Packets coming from our users network are tagged so the firewall can inspect the SGT and match ...
Hi Guys, I would like to seek some guidance how do you size up your firewalls? Let us say there is a client-to-server communication and I know the packet size which is 50 KB per endpoint and I have 3000 endpoints, how can I have this data in Gbps so ...
Hi,Can anyone please provide me the procedure the version upgradation from 9.8(4)29 to 9.12.4.67? What are pre-requisites ?
Hi All, I need your help. I have a Cisco ASA5508 box which will act as an FTD. My requirement is to upgrade the IOS on ASA5508 first, and then proceed with FTD. Currently, my Cisco ASA5508 is running Version 9.9(2)91, and there are vulnerabilities th...
Last day of support is June 30 2024, so little more than 2 years before being replaced, and Cisco has not gone above 6.4 code for these appliances. The company doesn't leave EOL unsupported network hardware running in service for very long except s...
How wonder how many CPU there is in a Firepower Chassis FPR-4110-K9?Two commands with different results. The command "show cpu detailed" gives 8 CPU or core and cat /proc/cpuinfo show 24 CPUs.> show cpu detailedBreak down of per-core data path versus...
Assume two Firewall FW1 and FW2behind FW1 is router1 and behind FW2 is router2 which doing GRE tunneltraditional FW1 inside connect router1 uplinkwhy not the peer link between router 1 and router 2 also pass through the same firewall FW1 and FW2route...
Hey,I read in a document from 2018 that the virtual FMC supports 25 devices. I have 24 FTDs with version 7.2.4 and one virtual FMC hosted in azure with the same version. It looks like the FMC can only manage 22 FTDs. Can someone confirm this?Regards,...
Dear Team,I can ping / RDP / use ip based browsing but unable to browse through ASA . everything is allowed from outside and inside I can ping outside but I can RDP outside I can use the ip based browsing no problem . but normal internet browsing ...
Dear Team,I need more help. Thank you for the assistance. After following the guidance provided, we can now ping outside from ASA. However, we require additional help to enable ping from inside hosts to outside.https://community.cisco.com/t5/network-...
Why the Cisco ASA might respond to the ARP requests for other IP addresses on the network? We see sometimes that vm server shows in their arp table ASA MAC, although the arp table from ASA show the correct MAC of VM. "no proxy arp" could be used to s...
I have a FTD HA-Pair configured in FMC and it's inernal and external Interface is assigned to a Internal-Security Zone and an External-Security zone. So far so good. Now I added another FTD HA-pair (branch office) to the FMC and asking myself if it i...
