Hi getting a deny on a packet going external to my dmz. we have recently added "ip reverse path verify " on the dmz and outside interfaces of the asa - but on no other interfaces. I dont want to remove this command for anti-spoofing . The error we...
I have two ASA5525-X in cluster and software module of SourceFire on each of them. All day long, I have this error: **Interface 'DataPlaneInterface0' is not receiving any packets** and always after 5 minutes **All interfaces are working correctly**! ...
Hi all! I have following xlate cfg: SD2-5-7-15-FW-5/vdc-ke# sh run all | i xlatexlate per-session deny tcp any4 8.8.8.0 255.255.255.0xlate per-session permit tcp any4 any4xlate per-session permit tcp any4 any6xlate per-session permit tcp any6 any4xla...
Hi All, 5525-X ASDM file missing from disk0: after a power outage. What could be the issue? Suspected flash disk failure? Need your input.
Hello Community, I am new with ASA firewall and we have bought Cisco ASA 5516-X firewall with firepower threat defense licenses. We also have purchase Cisco Firepower Management Center (VMware) license. I want to start to deploy our firewall and don...
Hi, I followed examples from Internet to configure DMZ on ASA 5505 (version 9.*). The result is, I have traffic to a web server, it is accessible from outside, but the inside network has no access to Internet. I am posting here the relevant part of t...
Community, Will the following NAT rule work? I get a Warning message when I create it but the ASA doesnt error out. It warns about the overlapping pool: # src int dest int src add dest add svc src add dest add ...
Hi Cisco Support Community team Currently thinking as a scenario the Sourcefire NIPS are working in Blocking mode (Drop when Inline) option is enabled in the 'Intrusion Policy' Can you please let me know 'Strict TCP Enforcement' feature in Sourcefire...
Wondering if anyone has run into something like this before.We have an ASA cluster acting as our network firewall.We are using the ASA to NAT public IPs 1:1 to two different internal servers. Most of our servers are attached to a Pair of Cisco Nexus ...
Hello, I did a ASA 5520 Upgrade from 8.4.7 to 9.1(6)6. Since I am running the new Version I am not able to use https Connections with Clients which are connected to the ASA by Cisco Anyconnect Client. Client is Version 3.1 and Connection type is IPSE...
FireSight has a list of signatures that it recommends for disabling. What are the requirements that these signatures meet to be recommended for disabling?
Hi, I want to purchase a FirePOWER product as IPS solution in my infrastructure. I choose to purchase the FirePOWER 8000 but do I need also to purchase the FireSIGHT Management Center or can I use only FirePOWER 8000 appliance? Is it also possible t...
Hi Team, Would like to know if you have encountered issue on CPU with invalid value? This might be bug-related and I'm looking for the exact bug ID and fixed release for this. Thank you for your help! Regards, Mady
Running 9.7.1. Current config looks like this: object-group service Guest-Wirelss-TCP tcp group-object ApplePush port-object range 5228 5230 port-object eq 993 port-object eq ftp port-object eq www port-object eq https port-object eq pcanywhere-data ...
Hi all, Within my organisation we need to report over the status of our security devices. I want to use reporting within Firepower Management Center. I am looking for a way to list the devices (my ASA SFR sensors) in a report. Anyone has a clue how ...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 05-05-2026 09:59 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM | ||
| 04-22-2026 11:56 AM |
| User | Count |
|---|---|
| 9 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
