We are currently using the ASA active/standby mode, but ASA randomly failover due to missed hellos on the failover link. Our current timer is 200ms poll and 800ms hold. I want to increase the timer. Do I need to update the timer on both active and...
Forum Posts
Please view attached image. (**undocumented is that a Nexus 9k lives between the ASA and the "server".)1. What might be the cause of the illustrated symptom?2. Could this symptom be caused by the MSS inconsistency =1380 outbound vs.1460 inbound?3. Co...
Hello, We have recently upgraded our FMC from 6.6.5 to 7.0.4. We then upgraded the SFRs (ASA 5516-X) from 6.6.5 to 7.0.4. The SFR upgrades appeared to complete fine and showed as green and on version 7.0.4 in the FMC. However, we received the below w...
Hello, We are running FMC 7.2 and on the summery dashboard on the Threats TAB, there is a list called "Indication of Compromise by Host" where we can see hosts that have downloaded malware and are CnC connected. It looks like this: We would like to...
Hi all, Currently running 6.2.3.1 on a few 2110. Seeing this in the logs. Mar 17 16:26:18 fp2110 : %ASA-3-199015: Mar 17 16:26:19 fp2110 FPRM: <<%%FPRM-3-APPINSTANCE_NOT_RESPONDING>> [F0190][major][appinstance-not-responding][sec-svc/slot-1/app-i...
Hi All On ASA 5516 with 6.2.3.6 is there any limit on creating network object or network groups and assigning them to security policies? We need to add, to an existing block rule, more than 950 IP addresses ( as hosts) and then assign them to a poli...
Resolved! ASA 5525 ASDM Stuck at 17%
Hello, i've tried every compination with these ASDM & ASA Versions: 105 -rwx 25629676 18:20:30 Oct 07 2019 asdm-752-153.bin106 -rwx 111034368 08:58:00 Oct 22 2018 asa983-11-smp-k8.bin107 -rwx 32738244 08:59:54 Oct 22 2018 asdm-792-152.bin108 -rwx 341...
Hi guys,I have FCM with 2 clusters of FPR (active-standby) you can see on the screen:I am not able to connect with SSH. I Tried connecting with SSH (putty) to all four IP addresses: (192.168.5.38, 192.168.5.34, 192.168.5.37, 192.168.5.33), but witho...
Hi,I have DOT1X authentication configured on all switch ports (Both data & voice VLAN). I also have Cisco IP phones.My requirement is: to allow Cisco IP phones without DOT1X authentication. I have tried using "authentication host-mode single-host", b...
How do I export this cert? I need to upload it onto cucm. thanksThis is a stand alone FTD. It's not on FMC.
How can I generate a csr request for a web certificate? I could not find where it is generated
Hi All,Can someone tell me why you cannot set up a NAT rule on the ASAs with the destination address being a FQDN?I want to allow some internal addresses to bypass our proxy to go to an external address and thought this would be the best way to do it...
Have an FTD1010 that's been factory reset (currently not registered with an FMC), can get to the FDM instead.Its currently running version 6.4 and I need to get to 7.3. Hence I have opted to use the reimage guide found here as it means I can go direc...
I'm trying to get FTD 7.1.0-61 (with FMC 7.1.0-61) configured in GNS3 (ver 2.2.37) but interfaces are down (no packets received). Ive set the interface status in Health policy to disabled. The outside interface is set to DHCP but not receiving an ip ...
Hello.My web session keeps expiring in one firepower I manage.When I connect to the firepower web, the session expires in 1~3 minutes irregularly.In some cases, you cannot log in because your session has expired.The browser session timeout is set to ...
