I am facing issue in FTD 1120 while configuring URL Filtering, I have setup rules using FDM with Any Any. For Testing I have allowed Full Internet Access for particular Network and I am able to browse full internet without any issue, but as soon as I...
Hello.Goal:On ASA-5525......to permit servers 10.0.1.1/24, 10.0.1.2, 10.0.1.3......which use protocol sftp...to dynamically translate IP's to public Outside interface...to reach server 3.3.3.3 on its port 2222Question: What is the CLI code for this?T...
I’ve got 2 ASA’s side by side and it’s connected via IPsec - it works great Since they in the same site - I’d like to use a physical connection (faster/secure) and link the 2 firewalls and connect the internal networks on both ASA’sSo what is the be...
From book- "Cisco-ASA" 3rd edition, p355."Dynamically translate the internal network 192.168.10.0 when traffic is going out to the internet using the outside interface's address.""Statically translate all traffic for an internal web server located at...
Hi,Is there a way to change local credential of multiple FTD devices from CDO? If not, is there an easy way to accomplish this instead if manually doing it on individual devIces?Thanks.
Hello everybody, our customer has a ASA5516 running rel. 9.16(3)23 with Firepower module rel. 7.0.2-88. Unfortunately he don't have the password for the default user admin anymore. I took my credentials on the module and tried to regenerate the admin...
Good day experts. Could someone assist me with how i can convert configs on a router to ASA firewall running 8.6 code.I have managed to convert most of the configs but these below seem challenging this NATing and overloading is not making sense but i...
Hello. We plan to deploy an additional FMCv to achieve HA setup. The existing FMCv manages a pair of FTDs with RA VPN configuration. The official documentation states the below, which really confuses me. About Remote Access VPN High Availability If t...
Simple setup but going me crazy since yesterday. Cisco ASA Firepower 1010 with Anyconnect integration to Azure SAML. I have followed the Cisco and MIcrosoft documents and configured exactly as mentioned (for about 5 times literally till now). While ...
Hello everybody, our customer has an branch ASA5516 (OS: 9.16(3)19) and when he try to access the ASAusing AnConnect (4.10) he get the error message window:"Certificate Validation Error" In the logging appears (complete logging attached):...No certif...
I am getting the following error message when tried to see the received routes from BGP neighbour. I have Cisco ASA 5555 running on 9.3(3). ciscoasa# sh bgp neighbors <peer IP address> received-routes% Inbound soft reconfiguration not enabled on <p...
Hi All,We need to fetch the Policy export from the ASDM in the XML format for almost 200Firewalls. So thought of automating it. Which is the best way to do it? Any suggestions and inputs on this will be helpful. So the plan is automating the Login to...
Hi all,I have a site to site vpn established between CIsco FTD and Fortinet firewall (In Azure).I am facing issue in traffic leaving the fortinet firewall through the ipsecvpn tunnel interface, however, i am not seeing any traffic on the firepower, ...
Hello GuysI made this Lab in Gns3 to prepare myself for my CCNP Security examEverything work fine, I configure the FTD through FMC, I gave IPs for outside & inside interfacesalso, I have configured NAT and Static route, the issue is that FTD can't re...
HiWe're running version 9.18(3).Whenever we try to add a syslog server with UDP/10514 we can see that the syslog server never receives a packet.If we change the port to 514 we can see packets arriving on the syslog server. However, we would like to u...
