Hi, Just wonder if there is such thing as "TAC Recommended FTD Version"? I used http://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/200046-TAC-Recommended-AireOS.html#anc6 when I was upgrading a WLC cluster and hope th...
Hello currently i am working on Migration Project, where i need to migrate Juniper SRX to Cisco ASA. I am stuck between middle of this project, while converting to IPSEC VPN. Please find below details: 1. Juniper has configured route based and policy...
Hi I have a 5585X with 2 WAN interfaces. One is the OUTSIDE interface which the default route points to. The other is a VPN interface which I would like to use for Anyconnect VPN sessions. I have configured PBR to set the next-hop of traffic sourced ...
Hi folks! I'm modeling a simple network in Packet Tracer.7.0: The IP topology is functionning OK, PC0 can ping Server0 (there is a static route in the router 'Internet' 10.0.0.0 255.0.0.0 203.0.113.47). Yet, NAT is performed only when a ping is sent ...
Hi Experts Does the FPR 9300 running FTD image 6.x pass MPLS traffic in routed mode? In case we have two different ASs, peering on MP-eBGP with inter-AS option B and a FPR device in between, will the FPR allow labelled eBGP to come up and exchange tr...
Hello, I need to exclude a few external inbound IPs from triggering Firepower alerts. What is the best method to accomplish this: Pass Rule, Access Control Policy - Trust, Whitelist..? Thank You Frank
Hi guys, I hope someone can help. I need to do the following actions on the attached ASA * Block all Internet from LAN * Block all connections to 10.56.0.0 /16 * Block all connections to 10.57.0.0 /16 * Allow connections from LAN to 10.56.40.195/32, ...
I want to order ASA 5515 with FirePOWER. Did the new order include free 1 year licence for any FirePOWER feature, or should I purchase automatically licence ? What is the minimum subscription recommanded ?
Hi,does anyone know if it is possbible to span out decrypted traffic from FirePower 4110 (mirror port) ?Also, does anyone have any good experience of using SSL inspection on FirePower?Any pitfalls to be aware of?Any feedback is much appreciated.
Hello, I would like to find out why my ASA 5501 is not loading the saved config when booting up automatically? I have never seen that before on a Cisco device, I have to manually copy start run to reload it once is up. Thanks in advance.
Hello we are using a Cisco ASA Firewall pair for basic Access List, NAT and Site-2-Site IKEv1 VPN. The firewall is just sitting there and there has not been any need of configuration change in last 1 year and there wont be any change in configuration...
Running Firepower Management Center v6.2.0.2 I’m having 2 issues with NMAP and active discovery First issue: Hosts discovered by NMAP are not being added to the network map. Only hosts discovered by passive discovery exist in the network map. Is t...
Hello! Problem: I got the following error message when I try to access IPS using CISCO ASDM 7.1(3): Error connecting to sensor. Error Loading Sensor I have tried solutions suggested by other discussions with no success. I am using Java Runtime 6. Whe...
Hi All, We are planning Firewall Software Image Upgrade. We have a cluster with 8.4(4)1 Image, And we wanted to upgrade to 9.1(7). As per Cisco Docs, Upgrade can be in two steps - 8.4(4)1-->9.1(2) -->9.1(7) And this cluster carries almost 3500 VOIP C...
Nat Rule not working | Firewalling | Cisco Support Community // <
