Hello! and I hope someone can help me.As part of delivering a service to our customers I had the need to nat their destination (as well as our source). However, two different customers wanted me to nat their end and later noticed they use a similar I...
Hello,We recently purchased and installed a Firepower 1010 in a remote office intending to have VPN with the headquarters. At that remote office we have two vDSL lines which a providers router for each line. Each router has a cable connecting to an e...
Hi All . What is the alarm clear after Smart License out-of-compliance or authorization expire or other error message from smart licensing ? %ASA-3-444303: %SMART_LIC-3-OUT_OF_COMPLIANCE %ASA-5-444305: %SMART_LIC-5-AUTHORIZATION_EXPIRED: Authorizat...
So - I'm trying to find the changes my team did last night (non-prod environment) and I thought I could head to the syslog (Gear in top right ->Monitor->SyslogNow as expected I'm seeing tons of logs from this morning. I was hoping to skip like 15 pag...
Hi,We have been experiencing extremely slow performance in the GUI of our FMC recently. It takes an age to change screens and deploy policy changes.The management centre is on a hardware (1600) platform so the issue is not one of adequate resources i...
After upgrading our FMC/FTD from 7.0.1 to 7.0.2 it seems that connections tracked have jumped to a level that is not sustainable for our hardware. Could a configuration have been overwritten by the upgrade or is there an issue with the software that ...
Hi,i have 2 IPS deployed in inline mode standalone. Normally, traffic only run through 1 IPS. If i switch traffic from active ones to another, how can i achieve the mid-session pickup so that traffic will not be interrupted? is there any feature i ca...
Hi all,I'm fairly new to Cisco FTD so I'm wondering if anyone here can help me with an issue I'm currently having on my network. I can't seem to be able to reach a server via port 80/HTTP and I can see the traffic hitting my firewall rule "test-acp-r...
How can I ensure high availability for RADIUS service in Windows Server environment ? so it can withstand loss or even temporary downtime of any particular server holding NPS role.Please advice me Thanks
Can use IPsec on C891? Thanks -------------------------------------------------Device# PID SN-------------------------------------------------*0 C891FJ-K9 FGL183722U0 License Information for 'c800'License Level: advipservices Type: PermanentNext re...
Question on NGIPS can someone please explain how under Transport and Network Layer the "inline normalization" work on NGIPS ?
Cisco ASA send NSEL data . "Netflix Secure Event Logging. Hello I bit confuse how the 3 map are configure are and what they do. can some please tell me if I am correct how ASA is setup to send DATA to NSEL. Policy Map = setup to collect IP addressCla...
Hi,We are looking at an active active internet feed, which is achieved by using multi HSRP groups, on an ASA do you know if its possible to route traffic out to two different gateways if both gateway IP's are in the same subnet?
Hi All,,We've just enabled ECMP with two 1Gbps AWS direct connect links over the weekend.The ECMP zone is created in the global routing table, we didn't use VRF, and added equal cost static routes destined to AWS networks in the global routing table....
Cisco FTD 4150 unable to send mem usage into our monitoring tool. CPU usage is Okay. Cisco FTD 4145 unable to send mem usage. I am using below OIDs 1.3.6.1.4.1.9.9.48.1.1.1.5. ciscoMemoryPoolUsed 1.3.6.1.4.1.9.9.48.1.1.1.6. ciscoMemoryPoolFr...
