Hello,I have bypassed the sqlnet inspection, in packet-tracer phase 3, it shows that it is bypassed:Phase: 3Type: CONN-SETTINGSSubtype:Result: ALLOWElapsed time: 3794 nsConfig:class-map oracle-tcp-bypassmatch access-list oracle-tcp-bypasspolicy-map g...
Forum Posts
Hello Community.I am exploring Clientless SSL VPN and i implemented smart tunnels and port forwarding.I want to explore how those options work by understanding how the traffic flows from the client to the ASA.I am looking for examples with the TCP/IP...
Please HELPI encountered this error after UPDATING the system from version 6.6.1 to 7.2.5Now it says that there is no access to the Internet, although all users have accessWhat can be done?
Hi all,I would like to address a question that I could not find the answer in the documentation. We have a Cisco FTD and we are asked to add an IP to the global black list. We are also using CIsco Security Intelligence. How can we check if the IP is ...
Hi,I have two FTD's in HA managed by FMC. When i run a trace using same criteria on both the FTDS from FMC ui, i get differnt results on the primary active and secondary standby. sample traces are given below. Is it normal that only the primary acti...
Resolved! FlexConfig for PBR on DMZ
Hi Everyone,I have 4 ISP's connected to my FTD 7.0.5 device ASA5508X with FMC 7.3.0. Now i have configured the 3 ISP's to route for our internal network and created a flexconfig for it then the other 1 ISP has been routed to my DMZ network and create...
Hi,I have recently installed ASAv from Azure marketplace for the first time and am experiencing issues related to a potential bug in software version 9.17.1.I need to downgrade to a previous known working version but cannot find any documents/guides ...
ise tacacs accounting logs no network-device comand history .How to achieve this requirement？
Hi, I'm telling you about my mistake, I have a Firepower 1010 firewall and I wanted to update the rules and analysis systems that the firewall brings, but it throws me the following error when updating any of the features that the firewall brings:"Pe...
Hi Team,What is the best way to give access to specific applications such as Webex, Zoom, Office365 anything for that matter.Regards,Sanjay S
Hello,I have a site A connecting to 2 sites, HQ and site B, over site-to-site VPN. On site A, the interesting traffic ACL for HQ has a 192.168.0.0/16. Also, it has another interesting traffic ACL for site B, which has a 192.168.150.0/24 subnet. This ...
What is the advantage of enabling sqlnet inspection and what is the down side of disabling sqlnet inspection "no inspection sqlnet"?I know very well the pro and con of enabling ftp inspection and disabling of ftp inspection but for the past five year...
We have a firepower 2140 as our perimeter firewall and is running ASA software. We are noticing the ASP-DROP counters increase at a very rapid rate. I did a "clear traffic" wait 1 minute "show traffic" and we saw we are dropping 12600 packets/s on th...
Hello everybody,our customer has many ASAs that wan not upgraded for a longer time.I want to upgrade them from rel. 9.8 to 9.12 in the first step.Is there a tool that checks the configuration (attached) if it is compatible with the new OS release or ...
