Hi all 01. Running ASA firewpower and FMC with version6.10. Loaded with full range of license: URL, Malware, control, protect. 02. I able to block facebook and youtube with protocol http/https running on browser, but i can block it at mobile apps 0...
Forum Posts
Hi All,My customer has asked if FTD on 9300 supports remote clustering yet. I understand it was on the roadmap but no sure of the current status. Can anyone offer any guidance on this?
Hello, Hoping someone can explain what's happening here. Here's what I see in the 3 events below. 1. Connection is built between src:10.102.0.40/52845 and dest:10.102.89.80/8089.2. Firewall immediately denies the connection because there is no exist...
Resolved! Module compatibility 5515-X
Hi I am trying to dtermine whetehr of not the 5515-x will support an ethernet module as we need to add port capacity. This is the module i would like to add. ASA-IC-6GE-CU-B= Some documents tend indicate its not possible - but I have seeen instances...
Hi,I have an ASA 5515-X with 9.1 version.Where I have created 5 sub-interfaces in my 0/1, with individual subnets whereas Firewall is Gateway to my user.0/0 - outside - WAN0/1.1 - inside16 - 172.16.16.1/230/1.2 - inside30 - 172.16.30.1/240/1.3 - ins...
Resolved! SHOW NAT command on ASA 5520 8.2(5)
Hey, When I do a SHOW NAT command on my 5520 firewall, i got the following results:match tcp inside host x.x.x.x eq 123 outside any static translation to y.y.y.y/123 translate_hits = 0, untranslate_hits = 105 I would like to know what is transl...
No ip connectivity between 2 private networks, each behind a cisco asa, with an ipsectunnel between them. The ipsectunnel is up, but no ip connectivity. I did configure the networks behind each site.One network try's to ping the other one without res...
Hi Cisco Support, May we request for your assistance if our setup in branch router regarding zone base firewall? We convert our CBAC config to ZBF because we are using isr 4k routers. Our branch has 2 MPLS/IPVPN links 2 of each tunnels. We bind the z...
hi,i'm trying to clean up ASA NAT.using the show nat output, do i remove the ones that got both translate and untranslate 0 hits? translate_hits = 1305069, untranslate_hits = 0 <<< DON'T REMOVE? translate_hits = 0, untranslate_hits = 0 <<< REMOV...
I am getting the following errors in my identity policy - Is this error a warning that can be ignored? If not why can I not add multiple rules in my identity policy?
So I am in this dilema where the person before me configured our internet ASA using all ASDM, so its hard to figure out what is what in the CLI since all I see is DM_INLINE_blah. for example: access-list INSIDE_access_in line 15 extended permit objec...
Hi Guys, We have a challenge to restrict the Maximum no of LSA received on ASA 9.4 version (The number of OSPF LSA messages accepted by the device should be limited) We have a similar functionality on Routers with the help of the command (max-lsa max...
Resolved! ASA 5516 DATA PLANE STATUS DOWN
Dear ALL,I am installing ASA 5516 with Boot and Sys Image of 6.0.0-1005. After installing The SFR Image by DAta PLANE went to Down Status. i Perfromed Rebot of The module but still issue reamins the same. i Have Attached Cureent Screenshot of the ima...
Resolved! Port Forwarding ASA 8.6
Hi everyone! I have a problem with port frowarding to my IP camera from internet. My configuration looks good, but the port forwarding doesn't working from Internet. Config is below: Interface GigabitEthernet0/0.666vlan 666nameif IPCAMsecurity-level ...
I am trying to connect 2 VMWARE servers directly to my 5515-X firewall.And this is the configuration I am looking for:Gi0/0 - outside (already configured and working)Gi0/1 - inside (already configured and working)Gi0/2 - trunk with VLAN 1 + 2 + 3 + 4...
