We've just setup 3105s in HA with a FMC When we failover the FW, and check the route table we cant see our default route on it. it takes over 20 seconds for the static route to be populated in the routing table. The outside interface is up and con...
Forum Posts
Resolved! anyconnect vpn failed attempt logs
Hello,My firewall (cisco asa 5516X) is being hammered on with user accounts attempting to connect to my vpn via cisco anyconnect client.These are bad pword attempts and locking out these users. I have Microsoft MFA enabled for anyconnect connections,...
Resolved! SFP Down on FPR 4100
Am trying to configure the Cisco FPR 4112 box. So far Chassis management has been configured and am able to access and manage the box ok either via SSH or Firepower Chassis Manager. The connection to the box via the chassis management port is success...
Hi, On ASA we used "userPrincipalName" attribute as username for VPN as we wanted everybody use email address as "samaccountname" is too short for some users. How this can be achieved on FTD managed by FMC? (both version 7.4) Thanks
SPI Enabled or not in FTD My auditor ask the below points evidence, kindly check and pls help us1. Provide screenshot to show stateful inspection enabled on external firewalls in scope.2. Provide screenshot for anti-spoofing access list or similar se...
Threadname: PTHREAD-1756Rip:Version: 9.20(2)21Hardware: ASAv0x0000000000cb72c7 : snap_mini_dump+151 at ../infrastructure/finesse/snap.c:9020x0000000000cb73ff : snap_dump+95 at ../infrastructure/finesse/snap.c:25450x0000000000cbb11d : snap_handler+573...
Resolved! FTD Route based VPN Question
HiI am just configuring a RB VPN between our FTD and another ISP and I notice the option for backup VTI, does this allow me to add a different source VTI and a different remote Peer IP Address for resilience within the same RB VPN ?? if so how do i a...
Resolved! FTD ICMP question
HiTo allow icmp to traverse a site to site VPN between 3rd party and us is it just the same as allowing TCP/UDP or do I have to do something different? I have created a static uni-directional identity nat rule also the traffic is to be initiated from...
Could you tell me about the subject matter? Recently, we replaced the equipment from ASA5516-X to FPR1120-ASA-K9. In the previous ASA5516-X, the connection was ASDM to the IP (192.168.1.1) of the inside interface in the VPN connection state with An...
Hello, We have a pair of ASA-5555 in spare that we want to re-use these devices. One of the ASAs is no longer showing its Interface Card module. The other device which is the same model with the same modules is showing the module. Name: "module 1", D...
For those of you that have been patiently waiting - 7.4.1 is now live on Cisco.com This release enables the 7.4 feature set for all FTD Devices (excluding those already EoS) as well as delivering additional feature capabilities and a tonne of improv...
Based on the security finding, need to remove software Oracle JDK and change to OpenJDK. May I know any impact on Cisco ASDM software? ASA5525-FPWR-K9 Cisco ADSM launcher – v1.9(7)
Existing objects that I want to either rename or remove. Getting unpleasant messages when I try remove.object network JohnDoe host 15.10.10.45
I need to service Isolated VLANS and I don't want to use VM's or setup a DHCP server for each VLAN. Since I need more than 256 IP's on many VLANS, I'm trying to figure out what to do. I do have 9400 switches connected to the FTD's but I'm wavering ...
Hello everyone,I have little expertise in network security and work for a small company. I need to configure port authentication for a SF550X-24P 24-Port 10/100 PoE Stackable Managed Switch with firmware version 2.5.9.54.What I learned is that I need...
