We are facing issue continues IPsec GRE tunnel flapping in case of backhaul link flapped. CPU going at the higher side and GRE Tunnels which are not enabled with crypto are stable. We have DC DR SolutionBranch to DC GRE tunnel created for ipsec.DC co...
Forum Posts
Hi,We upgraded a pair of ASAs from version 9.14.3.18 to version 9.18(4)40. After that, we could not SSH into the ASA. At the moment, we can access the firewall via the console.I turned on debugging on the ASA while I attempted to SSH. The log file in...
Resolved! Cisco Secure Firewall 1220 CX datasheet
I want more information regarding the Cisco Secure Firewall 1220 CX but cannot find more details about the product including datasheets and ordering guide. Kindly assist or point me the right direction.
Hi to all,i am facing an issue with the following scenario:A cisco 2811 successfully starts IPSec VPN with an FTD.Behind cisco 2811 exists a real subnet and i am able to ping between this real subnet and all other Real IP subnets that are routed from...
I have FMC and configured hairpin NAT to access to web server with public IP from internal LAN, and it works fine when I try to access to web server with public ip from internal LAN, but problem is when I try to enter to web server with internal IP f...
HiIf I NAT a range on our FTD to a Pool of addresses before it goes across a VPN do I need any extra ACLs, I am seeing the traffic on the peer FTD and its now sourced from the new NAT pool, ?? Thanks
Hi all, I have 2 x 9200L Catalyst trunked together. My objective is after PC1 has been plug into Port1 of SW1, PC1 cannot be plug into SW2 and violation restrict will be triggered. Is this possible or what am I doing wrong here? PC1 -> SW1 <---Trunk-...
Hi, I need some advice. I have an ACL1 with four internal VLANs as source (VLAN1, VLAN2, VLAN3, VLAN4). All of them have permitted access via tcp/80 and tcp/443 to destination ANY (WAN). ACL2 permits VLAN3 to access a host in VLAN10 via tcp/21. The p...
Hi, How can I find the launch date for FMC1700-K9? Thanks
I am trying to access my syslog server over site to site vpn via ASA inside interface, it is not reachable. I'm not able to ping it as well from inside to Syslog. however, my remote users are able access the syslog via site to site tunnel successfull...
Hi,Need help here, Im migrating Cisco ASA5555 to Firepower 2100 ASA. I have uploaded the configuration on the Firepower 2100 ASA but Im not able to ping the point to point connection between the Firepower ASA and my Router. Core1#show running-config...
Hi everyone, I would like to disable the usb port on the firewall in order to block physical access. But I didn't find the CLI command (ASA v9.8.1) Having tried to search in this forum, people said it is impossible to do. Did someone succeed to...
I Have ASA5515-x and i need to disable all the USB Port is this possible
Hello Experts,Are all interfaces supported to be a source for the SNMP using FDM? if we can use the tunnel interface, how can we know the API related to this interface to put the details inside the SNMP-hostFTD 1120, version 7.2.5.2Thanks
Resolved! SNMP sever on Firepower managed by FDM
Hello community! I'm struggling with setting up a snmp server on a cisco FTD. I only have on-box management (FDM) running with the suggested version 7.2.5. I'm pretty sure that in the past it was possible to upload the configuration via flexconfig, b...
