Per the documentation, what can be local certificate be used for? Can it be used to ensure the machine connecting to the VPN is a member of the domain or is there a better way to go about that? Don't have an ISE deployment. I can't seem to find addit...
Forum Posts
Hi everyone, Im use ASA 5506-X ver 7.2. I know all traffic can flow from Higher Security Level to Lower Security level but Is it possible to create a limit IP list can accessing outside and how I can configure this?Thanks
Hi All, Does de-registering/removing ftd from existing fmc and re-registering into new fmc would flush the configuration from ftd or it retains its configuration when i add into new fmc. Also if configuration has been flush from ftd, then would it st...
Hi,Given a ASA firewall running multiple contexts configured like this:context web1 description Internet Edge/Hosting 1 member web1 allocate-interface Port-channel1.2-Port-channel1.3 allocate-interface Port-channel3.1140 allocate-interface Port-chann...
Hello All, Going to migrated Asa 5585-x in cluster to FTD 3120 using Migration tool. Basically i need some help/guidance on below points. 1) Does Migration tool supports Cluster configuration i.e cluster configuration wil also be migrated or only Asa...
I wrote a short article on how to send specific networks (per SSID) from one country/location to another where the traffic on that SSID egresses the Internet connection on the remote side. Think Nord VPN, but no client required. e.g. One SSID can egr...
Resolved! NAT between SRX and Cisco
Cisco warriors, I need help with this please!I have SRX doing proxy-arp 192.168.0.0/16 with directly connected to cat 9300 cisco I want to put another SRX in between as a layer 3 for extra security. is there a way to keep the same IP address for the...
Is there any documentation related to Multi-site Clustering with Firepower?Is this still the best approach to protect North / South traffic?
I'd like to send syslogs etc sourced on an ASA to a destination that is connected via an IPsec tunnel on the ASA sourcing the traffic. Is this possible?I'd have to have a a no-nat matching the traffic and also "same-security-traffic permit intra-inte...
Resolved! Ping from outside interface (FTD7.X)
I'm going live with FTDs for a new site managed by FMC soon. We currently have the FTDs (HA) setup and running. We have been testing VPN. We have other locally managed FTDs.(Plan to redeploy those later). Currently the default route for this new site...
I am implementing Anyconnect SSL client VPN and I only want 2 users to be able to access the network on this connection. How can I restrict that access? I have found different thoughts on this but nothing that seems to work. Please help.Thanks,Ken
Hi. I'm trying to establish if I have my firewall setup correctly for stateful failover. We've had reports that failing over the firewalls caused ip phones to drop their calls, suggesting it is not setup as stateful. From what I can establish, it is ...
We can use Amazon S3 ESC Storage instead of instead of SFTP Cisco ISE 3.1 Patch 8
Hi Guys, I have a Cisco 1010 FTD using FW version 7.2.4 and I have 2 ISPs. One is a leased line but the other is a FTTC so that uses a PPPoE username, password with 1 singular external IP address. I have found the solution of an SLA monitor the defau...
Hi,I have a Cisco FTD 1150, looking to install a new ISP fiber connection. Currently, I have port 1/9 enabled, however, when I plug in the second SFP module to any of the other SFP ports (1/10-1/12), the 1/9 port gets disconnected along with the new ...
