Hi All,I've been tasked with migrating DMZ from a legacy ASA to a FMC managed FTD.Currently there's a transit LAN to route DMZ destined traffic to the ASA.We have a 20G (2x10g) port-channel between the core switch and the FTD and all zones listed bel...
Hell All, I am using ASA 5500 in my office and would like to open few ports, imap.gmail.com, 993 and smtp.gmail.com 465, 587 for gmail. Can someone help me to create and ACL for the same. Since gmail IP's changes very often, I am confused. Appreciate...
HiI would like to configure inter-vlan routing in firepower(FMC) using VLAN sub interface.I've created sub interfaces with separate VLAN ID on physical interface. And I've configure trunking port at the access switch side with appropriate gateway.But...
Hello Guys how to delete the rsa key already created in ASDM using ASDM, asa code 9.1 thanks allIbrahim
Hi All,Can we add 2 interfaces to the same Security zone?Regards,Sanjay S
We are purchasing a number of Firepower 1010 and the people that are to manage them are familiar with ASA and ASDM but not so much with Firepower and FTD. The devices will not be running any advanced antimalware features (we buy them without any subs...
Hi,We need to buy about 20 Firepower 1010 devices for as many sites. The devices should support basic remote access VPN for just one or two accounts. I see that the free Remote Access VPN licenses that came with firewalls are now gone, and we need to...
Hello everyone,I got an issue with FTD filtering based on URL rules (predefined categories).I have some rules that blocks sites with adult content, gambling, video games and other categories: Some of sites are blocked and I got ERR_CONNECTION_RESET, ...
Dear community, I'm currently configuring a cluster of FTD 3120 with FDM running version 7.2.5. Using the REST API I'm trying to push an snmp configuration but I'm getting a strange error when I specify UDP port 161 instead of 162. Below the JSON con...
Hello all,I've encountered this error message while I was trying to add an FQDN to the split-tunnel list on our production ASAv.group-policy GroupPolicy_VPN_ADC_DNS attributes split-dns value .... The message was like: Error : input line size exceede...
Hi to All Engineers,i hope to be fine, i have ISE server version 2.7 which already install Base and Device Admin licenses for TACACS how do i Backup from the both Base and Device Admin licenses, when i want to reinstall ISE 2.7 and restore that both ...
Hello all, I have been working with a speed issue on an ASAv in a datacenter. I don't have access to the backend of the ASAv. We have a site to site VPN tunnel configured between the datacenter and the customer. We have been troubleshooting this for ...
Hi all, I need some confirmation or experience sharing regarding FMC external authentication for CLI access to managed devices. It seems that starting from FTD 7.x the only way to get this working is to specify the list of users for CLI access in FMC...
I checked because it wasn't authenticated with secondary ISE.The admin certificate was missing. The exact history of when it ceased to exist is not known. Are there any similar cases related to this?You need to check whether you just need to issue a...
Hello everybody,our customer has a Firepower 2130 cluster running ASA OS rel. 9.14(3)18.I want to open a SSH session (Putty) to the outside IF that stay open for a daywithout further interactions.Unfortunately the session will be close after a couple...
