HiPlatformMy end : Cisco ASR1001Far end : Palo AltoI am trying to establish GRE over IPSEC tunnel with a customer using Palo Alto which fails when Palo Alto tries to initiate (role initiator) and Asr1001 is the responder. When the roles are switched...
Forum Posts
Hi Team,The Last Any-Any block is not working as expected. When we set action of this rule to Allow then all the user created policies work fines (Created above this rule) & if we set the action to deny then all the traffic gets blocked. Any suggesti...
Hi guys, I am trying to configure the SNMP service on a Cisco FTD 1140 using CLI, but when trying to apply the changes I get the following error: Error: Changes not allowed. use: 'connect ftd' to make changes. I don't have the FMC, I only have the FD...
I'm installing a new instance of Cisco FMC 7.3.0 in the latest version of GNS3 but get "System initialization in progress. Please stand by. " immediately after login in the first time. It's been running for hours. I've tried using more memory and cpu...
So, Hope this is on the right board.... The 5515-x went EOL last year. I need to update our device to the latest firmware (9.12.4). You can't purchase a service contract on an EOL device. For "reasons" i need to update this device while we are in the...
Hi All,If need to nmap scan for security Can i some ACL command for permit nmap scan to ASA for tcp22/443. Ex. access-list NMAPSCAN extended permit ip host <ip-nmap host> host <IP Interface Firewall>access-group NMAPSCAN in interface <interface-name...
Hellohow to implement firewall and Packet Filtering in WAN infrastructures ?what are the technologies to allow us implement the firewall to secure wan technology ?Does SD-WAN technology implement firewall and Packet Filtering?i wait a reply from expe...
Resolved! Cisco Firepower VS Fortinet SDWAN
Is Cisco Firepower (DVTI and PBR w Path monitoring) equivalent to Fortinet SDWAN?
Hi I was hopeing some one could explain how to do this.I am trying to restrict my core switchs (4506's) to only accept incomming SSH and Telent (managment) traffic that is directed to a single ip interface.I thought I could do this by placing a acces...
Resolved! Zone-Pair depreceated in ASA Firepower?
HejI am trying to configure ASA FPWR 1150 (Version 9.16) with Zone based security.I have been trying to find CLI based examples for it but all of them seems to be for IOS based. I can create a zone and apply interfaces to a Zone. However, the "zone-...
Hi,I have setup a test lab where i have a host behind FTD. In FMC i have setup a nat rule and an ACP and rule with correct settings .. for some odd reasons the client cannot reach internet. in packet tracer all is good and result is allow. The clien...
We created a public server in ASDM for Exchange Server, published the smtp and https service. After some time, this entry disappeared. In the access rules, the access sheet and nat entries for were also created, but they are in the same place. Where ...
Resolved! IPS engine
Helloi want to know how IPS engine can cover :Antivirus , web filter , EMail filter , control d'appkication ...? second question :what's differnce between IPS engine and IPS sensor ? I wait a reply from expert security Thanks
Hello Cisco Community, I have a Cisco ASA Firewall and I need to migrate one of the inside interface from the current Gig0/2 interface to a new Port-Channel using also this same interface. Here is an example of my current setup: interface GigabitEthe...
Resolved! v7.x Netflow to remote collector ?
I have a bunch of FTD's around the globe all managed by FMC, they are v7.x code. The ones local to the Netflow collector (as in same subnet address range) work as expected, the ones in remote locations don't.The ASA's they replaced used to send Netfl...
