We have around 150 remote offices, each with at least two broadband connections; the original goal 10+ years ago was to use separate connections (one for staff and 1+ for customers) to minimize cross-traffic affecting performance and stability. Our o...
Forum Posts
Hi AllAnyone can I help me?The LAN have 0ne ASA5525 cisco external firewall,two 3650 cisco switch for DMZ directly connected to external firewall. Two 4503 cisco switch for collapsed switch directly connected to exiternal firewall in the inside part...
Hi AllAnyone can I help me?The LAN have 0ne ASA5525 cisco external firewall,two 3650 cisco switch for DMZ directly connected to external firewall. Two 4503 cisco switch for collapsed switch directly connected to exiternal firewall in the inside part...
Hi. I have configuration like in the attached picture. I have 2 ISP. Both are sending me default route 0.0.0.0 to the Internet. ISP1 is primary, ISP2 is backup.BGP is working fine on 3560, I can see those routes. But the traffic from VLANs first sho...
Resolved! Port forwarding on ZBF is having issue
I am trying to configure Port forwarding on ZBF (Cisco 2911) router. I am facing the issue: I am getting following error message in in-zone to out-zone. I am getting following error msg- 10.10.10.XX:443 2.50.49.187:52118 on zone-pair ccp-zp-in-out cl...
Can someone help me out with this problem? We currently have 1 ASA in Datacenter 1 and are trying to implement a second firewall in another Datacenter. The interconnectivity between the Datacenters is fine, but i'm getting the "Failed to locate egres...
Gents, Is there any benefit of having the appliance operational considering it has old signatures that may still block some attacks?. The IPS device has no Cisco SmartNet contract and no signature releases supported by Cisco. Please advise,
I created a VPN tunnel from a Cisco 2911 to a sonicwall TZ series. The tunnel shows up and active on both ends but I cannot ping either side nor remote desktop etc. Not sure what I'm missing to allow traffic both directions. Any help as always is app...
Resolved! Register FTD to FMC,
Hello, im trying to register the FTD at FMC, both are in the same LANThe FMC has the IP 10.1.1.31The FTD has the IP 10.1.1.30 Im trying with the below command:> configure manager add 10.1.1.31 cisco123And im expecting to see the below outputManager s...
Resolved! FMC IP SLA not working as intended
I have 2 ISP links that I want to set up SLA Monitor through FMC. I'm able to ping those two uplinks from my firewall. I setup SLA Monitor as shown in screenshot (attached) 2 ISP default routes screenshots are attached, as well. However, as soon as I...
Dears,We have RV042 Small business security Router, this router connected to ISP Modem (Bridge Mode) then to ISP.Interface WAN of this router configured with static real iP.We enabled https and we can reach router from outside.But when we try to esta...
Hello. Recently we installed a brand new ASA 5506 for a client. After the installation we were able to SSH into the device via the outside interface and the outside interface responded to pings. Now, the ASA will not respond and we cannot SSH to it. ...
I have ASA 5512x Base licence with Firepower i want to make upgrade of his licence and purchase a second ASA 5512x SEc-Plus without Firpeower to make a failover is that possible and how i configure it?thank you.
Dear all, Currently I have ASA 5512-x with ios 9.0.2. and I need to upgrade license to ASA firepower. Please help guide me, how to upgrade ASA 5512-x to ASA FirePower. Best Regard
Would you please help me on how to create a Layer 7 classmap/policy-map and specify an action of "allow-tls" using ASDM in ASA.I need to do this to allow the TLS traffic passing through the ASA from outside,
