hi all
i have a little problem with my asa, which is, a host that connected to outside interface cannot connect to host that connected to inside interfaces. my ASA currently running Transparant mode, and following is the configuration of my ASA. for...
I have a question from one of my customers, can Clam AV run on the FP4100 without any AMP license? according to this document AMP is the service that runs Clam AV.
http://www.cisco.com/c/dam/m/en_uk/events/2016/securityexperts/pdf/ngfw_english_061020...
When I begin forwarding traffic to an ASA's firepower module, either in-line or monitor only mode, do I need to disable the traditional protocol inspection offered by the ASA such as is found in the global policy map that inspects http, ftp, icmp, et...
Hello Folks,
Need your help to understand the licensing of Cisco ASA5545 FirePOWER IPS.
I have 2 ASA 5545-X with FirePOWER Services, out of the box I have received the ASA 5545-X with FirePOWER Services (ASA5545-CTRL-LIC) on paper.
I have installed...
I'm trying to extract the ARP table from an (FMC-managed) FTD 6.1 device, yet I couldn't figure out how to do it. My customer has been doing this at location .1.3.6.1.2.1.4.22.1.2 with his McAfee Sidewinder firewalls I'm about to replace, but FTD doe...
I have two ASA 5520 (soon to be replaced I hope) configured in failover. I want SNMP to check status of the interfaces so I get a notice if something goes bad. However, since a failover can be trigged and the standby unit takes over the active interf...
Hi all,
As i know FirePower have IPS capability on it, and i have no ASA 5508. I see at the Home screen the ASA FirePower Status tab, but in the Configuration part i don't see the option for it. Also they saying they need an SSD on it. How can i che...
I know what the advertised throughput is, and I also know what the advertised throughput vs actual throughput was for the 5505 - a huge difference. We ended up replacing some 5505 firewalls because throughput was abysmal. Has anyone actually tested t...
Hi all,
Please help me to out this issues, Network topology in attachment file.
- Config in FW 5525
object-group network R_SUBNET1 network-object 172.16.41.0 255.255.255.0object-group network R_SUBNET2 network-object 172.16.42.0 255.255.255.0object...
I have a 5512-X in my home lab and have what i am sure is a simple enough issue. All I want to do is get on the box to upload new image and failing at the first hurdle it seems. ASA is in transparent mode.
Management Interface of ASA
interface Mana...
Hi ,
we have installed Cisco FMC 6.1 on ESXi structure , based on cisco documents required hard space for FMC VM installation is 250G, after installation when we monitor statistic it shows us wrong value , in system > monitoring > statistics > it sh...
Hello,
I have a new appliance that requires one interface in the INSIDE and another interface outside of the network. It is a security appliance and is designed to operate as such. At one location this is easily done. We have a ASA5555x with a sw...
Setup an ASA and enabled FIPS mode. Can no longer connect via ASDM. Set the DH group to 24, and set the encryption for all to FIPS. Able to connect after I turn off enable FIPS and can't connect when I turn it on. Has anyone worked through this i...
Hi,
I'm doing a cisco migration context from fwsm to asa 9.4.
When I look in csm, i see that there's no destination in my nat rule. It only have source and translated address.
Also, it doesn't have an associated access-list.
How do I intepret that ?...
