Hi, I have a Cisco ISR 4451 with several internet facing VRF interfaces with crypto maps mounted and need to close all network ports other than IPsec without affecting the tunnels. An ACL directly in the interface will do the job?Thank you in advance...
Hello, I have a brand new FTD 1010 and want to manage it via the outside data interface. However, after entering the command "configure network management-data-interface", I receive the following error message "Error: This command is not supported w...
HI...I have a Cisco 3925 Router and would like to setup DNSSEC on it...I have searched for Documentation but cannot find any.Does anyone knowwhat I should be looking for? thx
Hello Team,Wished to stop managing FTDv via FMC and start managing it Locally. The FTDv already is up and has quite some configs.How do i achieve this? are there any implications, say possibilities of loosing current configurations?
Hi,I intend to upgrade my FTD's in HA. I have already upgraded my FMC to version 7.4 today. My FTD's are on version 7.01. Following are my questions - Is it safe to upgrade FTD's from 7.01 to 7.3.1-19 (I shall patch them to 7.3.1-84 lately) ? I have ...
We are troubleshooting a packet loss issue in our environment. Users are on the outside of the FTD, Servers on the inside. Servers are VMs in ESXi Hyperflex environment (forgive me for poor terminology).We can reproduce the issue consistently. Host m...
Hi, I am trying to find Packet Per Second (PPS) values from cli or gui with no luck. Is there any command or health monitor to track packets per second? Regards,
Hello @I want to integrate ASA5506-X in Cisco Prime but it looks SNMP doesn't work. though the configured community is correct.The setup is Site-to-Site IKEv2 IPsec VPN.The ASA Software Version 9.16(4). I want to manage it via the routed inside inte...
Hi,I need to change a production interface from Data to Data-Sharing, but I can't find in documentation if is possible to do in a production interface without downtime or the step-by-step to do it.Is that possible?
Hello all,None of the zones are able to resolve DNS. I can ping 8.8.8.8 from LAN and DMZ but cannot ping google.com. The DNS policy under policies > DNS is defaultDNS server group under Objects > Object Management has all the ISP provided DNS servers...
I am writing to request some information that would help me solve some problem in my university case study. I am particularly interested in learning about the following:The key differences between ASA firewall and cisco idsWhich one is more important...
Dears Please provide a best secure way to access dmz server from inside network via ftd fmc firewall . please provide if have any video or documentation for this . Thank you so much............
Hi Everyone, not sure anyone has experienced it (google doesn't give any hits for it) but I will try anyway. I want to use Firewall Migration Tool to migrate 3 contexts from ASA to a single instance on HA pair of FTD 3110s. This is supposed to be sup...
I am writing to request some information that would help me solve some problem in my university case study. I am particularly interested in learning about the following:The key differences between ASA firewall and cisco idsWhich one is more important...
hii use 2 ASA in Active/Active MultiContext mode .and i want add 2 another ASA to my network , and switch to active/passivemode without multicontexthow do i convert or migrate every context configure file in system context (.cfg file for every contex...
