Hello, I've been working on implementing a Zone Based Firewall for our offsite users that utilize an 881 router with DMVPN tunnels to connect. Right now I have an outsize zone (WAN facing), inside zone (LAN) and the self zone. I have zone pairs for I...
Hi
I have a ASA 5545 with version 9.4(2)11 in routed mode
And I have problems with the Global ACL.
I started with ACL's on the interfaces and that works fine. I put an ACL's on the interfaces with the lowest security and I use the ASA default that tr...
We are looking at replacing our old Cisco ASA firewalls with the ASA 5545X with firepower IPS, URL and AMP in a active/standby configuration. I have attached our topology, which is HQ and three remote sites. All servers and network resources (includi...
Hi Support,
We are having two units of ASA5550 configured one for Active and one Standby respectively.
Issue: We able to launch the Active unit BUT NOT the Standby unit.
Running version
ASA Version 8.2(5)51
boot system disk0:/asa825-51-k8.bin
bo...
I purchased a Cisco 5506 - x on Amazon and I am now looking for a certified partner so I am able to download my patches. I have contacted 3 in my area and they are not familiar with what to do with a ASA that has been purchased from Amazon. I find it...
Hi!
For some time our Firepower (version 6.1.0.1) is complaining about "URL filtering download failure". The log in /log/messages shows:
Dec 9 09:27:02 fmc Waiting for someone to connect to me...Dec 9 09:27:20 fmc SF-IMS[5954]: [6006] CloudAgent:C...
Hi All,
I have ASA5506 FTD with TMC license, but FTD can't use VPN anyconnect then i reimage from FTD to ASA+SFR.
Can i use TMC license on ASA5506 with SFR?
if not how i can do to change TMC to TAMC?
Thank you
I have a Firesight Management Console VM that has been running fine for a couple of months. I tried to log in today and got the following error:
"Unable to authorize access. If you continue to have difficulty accessing this device, please contact th...
Have a client who only had provision for single IP address on the outside interface. Now they have had a another /29 subnet as they needs have increase. The current outside IP has 4 L2L VPN and 9 DNS entries , so instead of have to rekey all the chan...
I have a firewall DOD DISA STIG I need to apply. I have to set authentication timeout to 60 seconds.
Is there a way to set authentication timeouts? So if a user tries to SSH into the device and let it sit at the login screen for 60 seconds, reset/dr...
Currently I'm able to limit bandwidth for the whole subnet like this:
I want to have a limit of 2Mb down 1Mb up for each client not the whole subnet. Yes I could create two access-lists and class maps for every single IP in the range, but I don't fee...
HiWe use security level 0 outside and 100 in inside. but when we use security level other interface (dmz) then 50 or 30 or 20. so my question is what is security difference 50 ,30, 20 ?.when i use 50 or 30 or 20 ??thanksBiplob
Hi allI got few questions would like to consult you all, it's about Sourcecfire FMC
01. Since version 6.x code, ASA now can do the SSL decryption on the box.But if the user using VPN client application (example strongVPN), is the SSL policies able to...
