I am having issues with my ASA not transferring traffic from VPN subnet to internal subnet. VPN is 10.1.1.0/24 subnet and internal is 172.16.10.0/24 subnet. : Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores):ASA Versio...
Forum Posts
We have FMC-FTD RAVPN with LDAP realm just like in https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/216955-configure-ad-ldap-authentication-and-u.html#anc17 The Identity policy contains the LDAP realm. The user-ba...
firepower configurationSupervisor Mgmt IP Address = 10.10.1.10Supervisor Mgmt IP Network = 255.255.255.0Default Gateway = 10.10.1.1SSH Access Configured =yes SSH IP Address= 10.0.0.0SSH IP Netmask= 255.0.0.0 HTTPS Access Configured=yesHTTPS IP Addres...
2 Firewall ( FTD ) with Same IP possible to manage from same FMC ? I have a situation, where i am placing a second FTD in my DR with same IP and Config as similar to On Premise FTD. But would like to add the DR FTD in same FMC where On Premise FTD is...
Say I have a FMCv (running in VMware) managing about 20 FTD firewalls (1k and 2k models) currently. I want to plan to move my existing FMCv to cdFMC within CDO. Is there a way to migrate the existing FMC configuration, such as the policies and object...
There was an issue with uploading the new image to the backup FMC. To find out why I want to access the FMC via cli and find the password wrong. So, I have checked the document to reset the password. After rebooting the host with single mode, try to ...
We have a number of FPR2110-NGFW-K9 in different zones in a network. They are standalone and not managed by any controller (one fw in each zone, data-diodes between zones).The fw's are sending syslog to our loggserver but there isn't any host informa...
Hi all,Customer has two 1120's running in single mode and in active/standby failover configurationnow i would need to put them into multi context modei tried first to put the active into multi context mode (via console)it starts as expected:pri/act/a...
Hi everyone,I have some questions about ports and communication serial.1.- What does it mean "Segmentable network port"?2.- What standards about Network Security apply on "Serial Port"?My technical Specification of my device are:I really appreciate y...
Resolved! IPSEC TUNNEL MONITORING- ON FMC
Hello,I have two ftds in HA being managed by fmc on vmware. is there a way for me to monitor these ipsec tunnels, and get alerts if any tunnel goes down?Ideas on tools that can do this, and how to integrate the same.your support will be much apprecia...
Hi, is there any config conversion tool for concerting Firewall config from traditional ASA 5510 box to firepower 2110 ASA appliance. Both boxes are running on 9.x ASA code
Hi all,I have Cisco switch CBS350 (I hate this switch because of different CLI commands).I need to delete switchport configuration (like this: "default interface fa0/0"), but "default" command not works. I couldn't find specific command for it. Can y...
Hi there I have a new firepower 1010 and for some reason I have the error message “gateway cannot be reached through port Ethernet 1/1 named outside” I know my isp line is up and running and NAT rule is on dynamic and yet I still have no internet on ...
Hi there,got a new firepower 1010 and stuck at first hurdle setting it up .. at first boot I put in manually my Static IP, subnet and GW and it won’t connect out .. I’ve put these IPs into my laptop and works so I know my external line works .. but a...
Im new to firewalling and im currently trying to allow traffic from Office 365 on our Cisco ASA 5515-X Is the a way to use FQDN with wildcard (ex. *.office365.com) There are numerous destinations similar to the example to allow Office365.
