Hi . i have deploy two FTDv on Vcenter and they are HA as Active /standby units. when i run switch active peer as soon as it completed , i lose my outside interface ping .i checked both FTDv config from CLI and interfaces IPs from previous unit assig...
Forum Posts
Is it possible to source a "copy tftp: flash:" command from the inside interface on an ASA?I have several ASA's in a customer network that are connected back to my own network by a VPN tunnel. I can successfully TFTP files onto other switches on the...
Hi allI am getting an error when running the readiness check to upgrade, via the FMC, a firepower sensor running version 7.0.3 to 7.0.4: [230510 08:45:03:652] no lsm information file available[230510 08:45:03:682] MAIN_UPGRADE_SCRIPT_START[230510 08:...
Hello.I registered the AzureAD certificate SAML in ASDM and succeeded in logging in from the web browser.However, the connection failed with the following message appearing in anyconnect.can i know the cause?
Good night, In the new equipment of these models there is an improvement at the level of port security, mac assignment, blocking a port if someone should not connect to it, etc. Thanks. Regards, Ciro Gustavo Mele.
Am trying to ping asa inside interface from the remote subnet of inside zone. In short have a backbone vlan connecting core switch and asa which is the inside (from this subnet able to reach the inside Ip)Where as from inside remote subnet unable to ...
Resolved! 1150 Active/Standby failover issues
I am looking for help with my Active/Standby failover on 1150 running ASA. As you can see my fo interfaces are up up, but mate's are unknown.ASA1#interface Ethernet1/1nameif outsidesecurity-level 0ip address x.x.x.x 255.255.255.x!interface Ethernet1...
I need to order the anyconnect license for ASA FPR1140 FW, however, bit confused on that. Can someone guide me on the same ? Its for 50-100 users ?
I have a 5515 and am trying to setup a dmz. I guess my question is pretty basic. I have the firewall setup basic outside and inside. I have an access list and an access group in interface outside. If the dmz port is also supposed to be attached t...
An interesting issue came up for me. I have an ACL that allowed host A to Host B on port 636. The firewall have a tcp session timeout of 2 hours. Host A established a sesson with B did some transfer and went idle. It then tried to send data aga...
Hi guys, VDB update is not working for VDB 363, 364, has anyone experienced this symptom?
Based on what I see in docs, looks like it must be done via CLI? I try to log into the FTDv via WinSCP and receive "Cannot initialize SFTP protocol. Is the host running an SFTP server?I don't see anything about having to enable SFTP on the FTD or som...
I have seen an issue with an ASA setting up a connection and keeping this connection through a wrong interface. Background: ASA is perimeter Firewall, has a default route towards outside and some routes pointing to inside (10.10.0.0) and some to a t...
Hi Team,May i know if we configure a Rule with certain unwanted URL Categories to Block on top of the rule base. Will it block only the categories and allow any other traffic from that rule?
Hello everybody,uur customer has a FMCv 7.0.5 and I have to upgrade the firewalls to 7.0.5. I was unable to upgrade Firepower 1120 from rel. 7.0.1.1 to 7.0.5 even ifthere was no pending deployment and the ReadinessCheck was successful. I just got the...
