It seems that ASA failover works fine without the standby address. What is the advantage of wasting an IP address?Regards,AM
Forum Posts
Hi all,I'm new to Cisco Firewalls, and I have questions about enterprise network design, so the requirements are:- VPN site to site and remote access for 100 user.- IP packets Inspection.- Supports IPS and IDS.- Supports routing between internal netw...
Resolved! Firepower and expired licenses
Hello, We have an ASA5585-SSP-20 with both IPS, Malware and URL filtering licenses. This ASA is EOL and we cannot extend the licenses and the will expire next month. We are migrating to a FTD 4112-X, but the delivery was delayed and we just received ...
Hi teams, As to my knowledge, there are two command about capturing packet in FTD. First, 'capture' command like ASA command. Second, 'capture-traffic' command based on tcpdump I think. These two command divided into where I capture starts like below...
So I am working with a FPR 1010 running FTD 7.1 latest release and decided to upgrade to 7.2. The first two attempts failed due to pending changes waiting to be committed (odd because there were none from what I could see). The third 'appeared' to be...
Resolved! ASA FirePOWER module down
Hi there,We have an issue with one of the ASA FirePOWER modules.On the active primary ASA unit the sfr module state is Up but Data Plane Status is Down. This module was showing Unresponsive 10 mionutes earlier while I was looking and came back up wit...
Dear all. Our FMC display this failure:"Deployment failed due to failure collecting policies and objects. If problem persists after retrying, contact cisco TAC.", when we deployment ths device. The FMC version is 6.2.2,Firepower version: 6.2.2-81. Wh...
Hi all,Have 2 ISP and need one internal subnet i.e 192.168.101.0/24 should go to Secondary isp for internet access. I have followed the below configuration and achieve what i required but somehow my internal dns (192.168.103.0/24 ) subnet not working...
Hi Friends,I'm sandboxing with the ASA 5510. Was successfully configured inside, outside, dmz interfaces, between interface pings, as well as pings from the internet to the dmz translated server sitting behind the public IP, so, so far so good, howev...
I there option to collect firepower logs in a readable format(json/xml) rather than using estreamer. Or can we do it using proxy
Hi,I see FMC for Cisco FTD has SSL Inspection rule.I am wondering if Cisco ASA firewall(version 9.4(4)18) supports SSL Inspection.Where can I see the SSL Inspection setup in ASDM if it supports?
Hi, I'm running FMC 6.2.3.1 and I got this warning message : "Disk Usage : Frequent drain of connection Events" on one of my FTS also running 6.2.3.1 version. I found onther subject speaking about this error but it referneced a bug already fixe...
Hello People,I really need some help here.I tried disabling ssh version 2 on cisco Firepower ASA console but then the ssh version 2 still remains even after running the "no ssh version 2" command.I want to remove the ssh config from the device.Please...
Resolved! Which type of SSL cert do I need?
HelloI am about to get an SSL cert for my Firepower 1120 from GoDaddy. Which OS should I do this in, Apache, or which one?ThanksStephen Keating
Can someone explain to me what I need to actually do per the Solution of this report below? I have a SSL certificate on the 444 port this report is complaining about which is used for anyconnect so I don't understand why this would be seen as weak ke...
