Network Security

Resolved! Firesight AC rule with action of trust

When creating a rule with the action of trust, do you have to create an opposite direction rule for the return traffic or does it automatically include that traffic in the return flow? Basically I have rules for inside to outside. Do i need the oppos...

Resolved! "At least one encryption algorithm must be selected" error when trying to bind SSL certifcate to ASA5545 interface

Hi, the identity certificate on our ASA5545 (running 8.6 software) is due to expire soon. I understand the process to renew means obtaining a new certificate and installing it on the ASA. So, I have obtained a new certificate from the CA (Entrust)...

Resolved! ASA5525 - AnyConnect for Cisco VPN Phone

Looking to add 25 users for AnyConnect for Cisco VPN Phone. Not sure on the new licensing guide. Licensed features for this platform: Maximum Physical Interfaces : Unlimited perpetual Maximum VLANs : 200 pe...

Resolved! Cisco ASA SHA2 Support

Is it possible to use the SHA2 signature algorithm when generating a self-signed certificate on an ASA? I can't seem to find any documentation showing commands that have control of things like the signature algorithm when using self-signed certificat...

ASDM

ASDM is included in the 5512 or not ?

VPN Tunnel Routing

Hi. I was wondering how I can go about routing traffic from 1 VPN tunnel to another. For example: Site A Subnet: 10.1.1.10 Site B Subnet: 10.1.1.20 Site C Subnet: 10.1.1.30 If I have point A as my main middle location, and point B and C as my spoke ...

ASA 5540 failover shows failed in standby

Hi Team, Can anyone help us in our problem regarding in our Standby firewall it shows failed status. Our temporary solution is we shutdown the primary firewall because when the primary is up the status of our failover is active-active. Is there any w...

copy SSH switch config to another switch

I am just adding a new switch to my network, so I copied the configuration of an existing switch to this new switch but I have a question Do I have to edit the SSH configuration or I can copy the same configuration. The switches are authenticating wi...

copy SSH switch config to another switch

I am just adding a new switch to my network, so I copied the configuration of an existing switch to this new switch but I have a question Do I have to edit the SSH configuration or I can copy the same configuration. The switches are authenticating wi...

ASA Faillover with PPPOE on named interface

I have two ASA firewall connected to ISP using PPPOE interface and I want to confiigure A/S faillover but I get message saying : you can't configure faillover with named interface configured as PPPOE or DHCP , so any work around for this ? why they m...

FWSM context license is gone

Hello everyone, Our company uses two Cat 6509 chassis in VSS mode each having it’s own FWSM-2 module. Recently one of these modules failed and we sent it to a non-official hardware repair company to be repaired. This module had 100 virtual context li...

CISCO ASA555X with Firepower - Adding 2ndary ASA back into Active / standby cluster ?

Okay before our SF upgrade, we had 2 ASA 5555x's in active standby mode.. I then broke the failover config and removed the standby ASA, running on Primary only. I upgraded the 2ndary ASA to latest release and added the SFR module etc Installed the Fi...

Resolved! Cisco ASA 5512 - Route specific subnet through secondary provider

Hello, I'm trying to achieve the following: Have all internal/LAN clients access the internet via ISP1, but if they are trying to access the subnet 80.80.80.0/24, traffic should go through ISP2. Right now I have something similar to the following sta...

Resolved! ASA 5506-X Virtual Interface Error on ASDM

Hi, Not sure if this is a bug with ASDM, but when I try to add a virtual interface through ASDM I receive the following error when clicking 'Apply'... "With the current license device will only supports 2 fully functional interfaces. Third interface ...

ASA 5520 and two ISPs

Hi All,I have recently set-up a redundant link on our ASA, part of the config below:interface GigabitEthernet0/0 (Primary ISP) nameif outside security-level 0 ip address A.A.A.A 255.255.255.240 standby x.x.x.x!interface GigabitEthernet0/1 nameif insi...

Network Security

Forum Posts

Resolved! Firesight AC rule with action of trust

Resolved! "At least one encryption algorithm must be selected" error when trying to bind SSL certifcate to ASA5545 interface

Resolved! ASA5525 - AnyConnect for Cisco VPN Phone

Resolved! Cisco ASA SHA2 Support

ASDM

VPN Tunnel Routing

ASA 5540 failover shows failed in standby

copy SSH switch config to another switch

copy SSH switch config to another switch

ASA Faillover with PPPOE on named interface

FWSM context license is gone

CISCO ASA555X with Firepower - Adding 2ndary ASA back into Active / standby cluster ?

Resolved! Cisco ASA 5512 - Route specific subnet through secondary provider

Resolved! ASA 5506-X Virtual Interface Error on ASDM

ASA 5520 and two ISPs

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

A new chapter of the Spotlight Award begins!

Join us in Celebrating the New Year and the Nov.-Jan. Winners!

Announcing Resources That Guide You to Success

Cisco FTD Migration from 4100 to 4245

My CSLU(Cisco Smart License Utility) can't login into Cisco.

same question, same issue, Intervlan routing not possible at FTD

Migrate from FMC virtual 300 to FMC virtual

FMC Connection Events Export

FTD and FMC backup creating a sf-storage folder

Route Based VPN FTD

Multi instance 3120 FTD - Each instance in different FMC Domain

FDM DHCP Relay

Need expert help with Firepower intervlan routing