Good day all;I am trying to migrate from ATT to Comcast internet currently my Outside interface is 199.1.145.6 and the following settings s as follows:access-list acl-in extended permit ip any host 65.163.193.100global (outside) 1 65.163.193.100globa...
Can't seem to retrieve certificate from our internal RootCA. The device is a Catalyst 9300.Current configuration:crypto pki trustpoint ICERootCAenrollment mode raenrollment url //infr-svr-cert02:80/certsrv/mscep/mscep.dllrevocation-check crlauto-enro...
Hi, We are running an HA pair with ASA 5525 using code 9.14.4, but there is a newer patch with the 9.12.4 code that I want to use instead. Has anyone gone through this upgrade before? Or are there specific considerations we need to be aware of? I've ...
We're running FTD 7.x on various FPR 2100 and 1100s. We have an asymmetric tunnel that we need to be able to sed pings through. TCP Bypass is working fine, but the ASP is dropping return echo-replies. Our understanding is that by disabling ICMP inspe...
Does anyone know where the ASA PCI ribbon cable can be purchased from?This seems to be cause of the alarm. After checking there was a slight cut on ribbon cable not making the full connection, after removing and boot. Alarm came up. Per show controll...
Hey Everyone, Just wondering if there is a limit on the maximum number export that you can have on the following models: 365044009300 This would be sending to Stealthwatch. thanks!
Hi to all,I am trying to understand the difference between the threat defense license and the URL licence.As SI is actually threat defense i suppose that you also get "bad" URLs as part of Security Intelligence and threat defense.What extra do you g...
I just wanted to reach out and run past something past you all for some advice. In the site we had a breach where hackers got remote access to a laptop on the internal network and attacked a few other devices powered on the network. That laptop was ...
We have a Firepower 4120 unit in a pair that has failed for RAM failure after an FXOS upgarde. What is the best approach to replace the unit considering that it has multiple instances running?I understand we can use the same SSD from the faulty unit ...
i have 2 asa in active/active modecontext1 active in ASA1(primary unit)context2 active in ASA2(sec unit)everything is okwhen failover link will be down , primary and secondry unit will be active for both of them ( it is normal behavior )but i want wh...
Hello everyone.This is a lab test using FDM 7.2.0-82 firmware on FPR 2110.The lab test environment was created like this.1. The 10.10.10.1/30 Routed interface named Inside.2. 10.111.111.2/30 Routed interface named rip-test-out.3. L3 (C9300) equipment...
Hello.I have ASA5506-X with FTD image installed. I connected it to my smart account and now activate 3DES license (PAKs or Tokens->Get Licenses->Crypto,IPSec->Cisco ASA 3DES/AES License->[enter sn]->next).Then: Add new PAK->[fill PAK, pin]->finish. C...
Hello, I wish to access the API of Firepower2140 to make backups via an open-source application.Is the API feature enabled by default to run curl requests?Also, is there a URL to list all possible API requests? Best Regards, José
I noticed that my FTD's do not show any traffic stats when running the command show interface in the FTD cli. I only see traffic stats on the sub interfaces of the portchannel. It seems very unusual to not see any stats on the portchannel interfac...
Hello everybody, our customer has FMCv (rel. 6.6.7) and two ASA5525 (rel. 6.6.7).(see screendump) Even if the ASAs do not use Smart Licensing I get the following error message in the Health Monitor (see Licensing ScreenDumps): Critical Modules:1,Norm...
