class-map global-classmatch access-list global_mpcclass-map outside_policy1match access-list outside_policyclass-map class_sip_tcpmatch port tcp eq sipclass-map outside_policymatch access-list outside_policyclass-map testing!policy-map type inspect h...
Forum Posts
Hi,Im using an ASA5585.If I have a PC_B outside the asa and PC_A inside the asa, PC_A can ping PC_B. If I disconnect PC_B from its connection, PC_A will begin to have incomplete pings to PC_B. This is normal. However if I reconnect PC_B to the networ...
Resolved! Configuring CRL FTD FDM
Using version v7.0.5 FDM (or any 7x) , is it possible to reference a certificate revocation List(CRL)? For use with RA VPN (anyconnect / Secure Client). I know this is possible using FMC, however is this possible using FDM.
Hello Comunity I'm looking for a definitive link to enabling FMC 6.7 > EU Cloud (AMP for networks)When we enable the option the toggle icon appears to be spinning in a pending state. /var/log/message shows as connected to the EU cloud During the set...
I understand using VNET Peering could be solution for this.When deploying FMCv, there is a parameter "public inbound ports" that connections are restricted except from same VNET and Azure LB by default.Even if this is enabled, only HTTPS, SSH and SFT...
I have recently created a HA pair between two virtual FMCs (7.3) and when I look at my secondary FMC there does not appear to be away to schedule a backup. I tried kicking one off manually and it failed a few times with a generic error (initializatio...
Hello,I'm having trouble opening ASDM.After entering the password, the message "Unable to Launch device manager from 1.1.1.1" appearsThe certificates are expired, how can I renew them to have normal access via ASDM again?CN=ASA Temporary Self Signed ...
Resolved! Modify Vlan ID on ASA interface
Hello, There are 2 ASA 5545 ver 9.14 in HA, and there is a subinterface associated with an ISP and another subinterface associated with a second ISP. We need to change one subinterface with a diferent Vlan id as well as the subinterface id for standa...
In the Cisco WLC DHCP configurations doc, it states that requiring DHCP Addr. Assignment is best practice for security. How can it possibly enhance security when DHCP itself is considered not very secure?
Hi Cisco community We have provisioned new FMC server with different MGMT IP address. So, we need to move HA pairs of FTD that joined to old FMC to new FMC. Is there anyway we can move them to join the new FMC without HA breaking?
We are having an issue when upgrading which suggests there is a peer registration in process but both appliances are in service and registered.From version: 6.2.3.15To version: 6.6.7.223
Greetings,I am a beginner network hobbyist, working with Cisco's equipment in Packet-Tracer and I am currently trying to connect 2 Cisco ASA Firewall's together. My setup is simple, it consists of 2 main networks (technically 5 if you count the poin...
Hi all,I need to change the firewall mode from multi context to a single context and I have only one context configured.Checking the files in the SYS context I can see:old_running.cfg / admin.cfg / mycontext.cfgThe actual context(mycontext) I...
Resolved! FTDv in Azure stuck in shell mode
Have deployed FTDv in Azure. Not able to add to FMC because it is stuck in shell command prompt. ftdv :~$ . How do i get ftd command prompt ?
Hi guys, can anyone tell me if the Cisco ASA 5525 is compatible with Cisco Firepower 2130 ASA Appliance. My company would like me to upgrade our Firewall and Cisco compatibility release notes are so confusing. Thanks in advance
