Hi Cisco Freinds, We have a customer with HA 1120, one of them won't show green on the FMC. Sftunnel on the Device is listening, show manager shows it as completed. The issue is the time on one unit is out, and we think this is causing heartbeat issu...
Forum Posts
Resolved! ACL for DNS Service
Hello, I would like to know what is the recommended ACL to configure in a router, to give a public DNS service. I know the basic, permit eq domain, deny special use IP address (10.0.0.0/8, 192.168.0.0/16, ...), block everything else....Do I need to o...
Resolved! NAT or NO NAT?
Morning So I am at my wits end. I have an FPR1010 w/ 8 STATIC IP’s (6 usable).My WAN FPR IP is x.x.x.182.I have available, .177 to .181. I am using x.x.x.177 as an IP dedicated to a server on LAN 192.268.5.42.Without NAT, NOTHING gets through and no ...
Cisco has FINALLY heard us! The purveyors and Champions of the Small to medium business markets, and produced the first match to the Cisco ASA5505. First they gave us the 5506 and we were all upset about the fact that the ports were NOT switched. W...
OUR ASA5516 firewall Firepower (sfr) module went down and came back up on 21/05/2020 .Please see below log:5/21/2020 3:21 AM BJG-R3-SFR has stopped responding (Request Timed Out)5/21/2020 3:21 AM Node BJG-R3-SFR has dropped its average response time...
We have users able to RAVPN to an office, but can't access another office. There is a site-to-site VPN tunnel between the two offices. The IPs user get when the remote in is 10.10.20.0/24 and the site they try to get to is 172.16.30.0/24.Is this a ...
We are looking for a way to export Firepower Management Center config to text so we can install to a "stand alone" ASA. We had a pair of FMC managed 5508-x ASA die on us and need a quick way to dump out the config in stored in FMC to clear text to in...
We currently have a Firepower 4110 running 7.0.4 managed by an FMCv also running 7.0.4. We've been experiencing some asp-drops because of NAT exhaustion, so I tried to change the dynamic Auto NAT rule from a single IP address to a range of IP address...
I am doing some FMCv testing in a lab. Is there an easy way to do a factory reset of an FMCv (or even an FMC appliance)? We haven't been able to find anything in Google searches. Otherwise, I have to keep building new FMCvs when we need to start from...
I am doing first tests with the new Secure Firewall 3120 (in application mode with ASA 9.18.2.5).In these tests I am experiencing configuration replication issues in system context.When creating a new context only a part of the context configuration ...
Would Device Manager Version 7.1(5) currently used with an ASA5520 on 8.4(7)30 work with the ASA5520 on 9.1.7.23? This document gives the impression any ASDM 7.1.x is still compatible with ASA 9.1.x: https://www.cisco.com/c/en/us/td/docs/security/asa...
I have a working site to site vpn between a client router and a ftd.I have a device on the router side that need to access a resource on the internet so I think there is no point on send that traffic to the tunnel to then send it to the internet so I...
We're using Anyconnect SSL VPN to ASA.* Asa inside interface is 192.168.1.1/24* There is nothing else but another firewall on the other end of "insde": 192.168.1.2* VPN clients use IP pools 172.16.1.0/24 and 172.16.2.0/24. This is mainly set up such ...
I have read quite a few articles online but I can't seem to find a definitive answer to this seemingly simple question. Unfortunately, I can't test it out on my gear either. Is it as simple as subinterfaces or is that not possible with a bridge-group...
Resolved! Radware DefensePro and Firepower 4112
Hello, I have a customer with a Firepower 4112 appliance with a FTD instance and they have asked me if it's possible to run an additional instance of Radware DefensePro in the same chassis. Anyone know if that's supported on the 4112? I'm only able ...
