Hi,I found configuration below on my customer switch:Extended IP access list ACL-POSTURE-REDIRECT10 permit tcp any 10.0.0.1 0.255.255.0 eq wwwAnyone know what is mean of wildcard 0.255.255.0 ?Glad to hear your response!
Forum Posts
Dear Cisco Community, Current in my lab using ISE 3.x with SC 5.x only check Anti-Malware (CS)installed. I plan to config more posture check by enable CS check both (installed and Running). Can you share good practice and how to config it? Thanks for...
I had recently a problem with AzureAD integration with Cisco FMC 7.4.2 and it was getting integrated and was able to partially downloaded and it was giving SQL related error. to get this resolved some highly contained object groups i did excluded wit...
Hi.We have an 1120 that just blinks green in the status LED.So I've connected to the CLI via USB and can see it stops at "Creating FXOS swap file..." when booting from itself. But also if I try to boot with a new image on a USB.When I try to factory ...
Hi Fellas,I have a question, regarding how the ASA with IPS module or Firepower with intrusion policy is able to check VPN traffic.The traffic is coming from a L2L tunnel and does a U turn pointing to a VTI so the traffic never pass through the devic...
Hello,we've a Cisco Firepower 2110 Threat Defense and we're going to move to M365.There's a large set of applications which I can setup in the firewall rules.Is there a best practise guide to setup our Firepower for the inbound and outbound rules? Ou...
good day, in-between TAC support renewal so can't open a case on this , so figured i'd ask of The Communityare there any add'l steps for Azure Gateway-side for traffic-flow thru FTD-based s2s ikev2 tunnel ?got the Tunnel 'up' but no traffic .... have...
Resolved! Firepower 1000 setup
This might be a dumb question but how would you set up the ASA firewall 1000 without internet connection? I have a switch that connects to it. I think I can console into it with putty but isnt there a gui ?
I have an ASA that I keep getting this error in the ASDM Syslog messages which I need to fix to troubleshoot a device. Severity 3 Syslog ID 313001 Denied ICMP type=8, code=0 from 10.21.1.100 on interface Work_interfaces I am a rule that permits ICMP...
Resolved! ASA cluster IFC failure
Hi, Team we had an issue with the ASA failover the one should show standby , but it show failed State Last Failure Reason Date/TimeThis host - Secondary Active NoneOther host - Primary Failed Ifc Failure inside: Failed could you help to undertand w...
Hello, I’m not at all familiar with any of the intricacies in any way and really am just requesting a simple version answer for this please. I just want to know which asa image file I need to use and what adsm image to use in order for the firepower ...
I have a asa5500x-ssd120 SSD from an ASA5500-X that is opal locked. It is a micron drive. I saw some commands to revert revert or remove the psid for the 3100 Series if I'm not mistaken but those commands are only for that series. There are some raid...
Resolved! Cisco FPR 3105 Licensing
Dear Community,I have a pair of FPR 3105 devices which have been reimages to ASA & running as ASAs with traditional ACL services.I don't have applied the Basic STD licensee; it has expired now post 60days of trail period. I am getting the throughput ...
I have imported the PKCS12 file into objects > PKI > Cert enrollmentWhen adding the cert to the device it is stating CA not available.. is this because the CA Root and Sub CA's are also required to be added to the PKI cert enrollment section?This par...
Hi, i came across a problem and i would like your help.During test procedures i did a shutdown of the outside interface in FTD-1 which is in failover pair. Deliberately, i had no monitoring interfaces nor backup IPs in the secondary FTD-2 as i wante...
