Network Security

SSH Port Forwarding on ASAv to the Internal Server on Azure Cloud to enable access from Internet

Problem Statement: We have an Internal Server (10.150.11.116) that we want to access through SSH from Internet. In order to achieve this we are using Port Forwarding mechanism to map a custom port 2222 to the SSH service on the Internal Server so tha...

Resolved! removing ACS from authenticating to allow local account

i currently have ACS enabled but, would like to test local account. i wanted to verify that removing aaa authentication ssh console TACACS+ LOCAL would allow me to login with the local account. i was not sure if i should remove the ACS box instead f...

SSH isn't available in Ubuntu's terminal [Putty allows connection]

An SSH connection to a Cisco router cannot be established through the terminal in an Ubuntu operating system. Through Putty, I am able to connect.The connection attempt logs are attached to the conversation.What should you look for? What can be done ...

TACACS Authorization

Hi everyone,I need to migrate an old Cisco Secure ACS to a new TACACSGUI.Old ACS run on two servers (XX.XX.XX.XX and YY.YY.YY.YY), while the new server is ZZ.ZZ.ZZ.ZZ.This was the previous configuration:aaa group server tacacs+ TACACS-GROUP-SERVER ...

Cisco 1120 running FDM. Console CLI credentials use RADIUS?

Cisco 1120 running FDM version 6.6.1-91. Console (cable) CLI credentials use RADIUS, just like all other authentication methods to the FDM.We're getting ready to upgrade our FDM. We want to be able to log into the console (using serial console cable...

ASA HA query

Hi AllI got ASA firewalls in HA pair (Active/standby) in old DC. I need to migrate this firewalls to new DC with no downtime. Am planning to do the below, please let me know if this works, Port1 in Active fw is connected to port1 in Standby firewall:...

Increase the console session timeout on FDM

Hello, I'd like to know if possible to Increase the console session timeout on FDM in the GUI interface. Thanks. Luigi.

Resolved! ASA 5545 check firepower SSD via SNMP?

Is it possible to check the ASA SSDs which are installed for firepower with SNMP?Because we had some failures in the past, but there are not many commands, only show raid.Thanks.

FMC - the applied policy is out of date

I have added 2x FTD to FMC but can't do HA as one of the FTDs complain about the ACP being out-of-date.How do i fix that?

FTD upgrade via CLI

I have two standalone FPR-4145 i want to upgrade FTD version, however i don't want to use the FMC but do it directly with CLI on the appliance.Is it possible to upgrade FTD version in CLI and what is the procedure? i could not find any documentation ...

Resolved! ASA 9.19 Forced Password Changes

We have upgraded some firewalls to ASA 9.19.1. I noticed that if I change the hash of some other user's password on the firewall, that when that other user logs in, they are forced to change their password. The idea is that the admin who put in the h...

Interface UUID in Cisco FDM 7.0

I am configuring SNMP v2c using the REST API but not able to get so... Can anyone help me on how to identify the interface UUID and on how to configure the SNMP v2c on the FDM 7.0

How to config firewall ASA 5505

hi therei want config Firewall asa 5505 access to server Now i set ip interface port connect to computer and server, config access rules.but i ping test computer to gateway server and tracert show request timeout

FTD issue - connection limit

I experienced a network downtime due to possible issue with Firepower 4115 and the suspect was high number of connections/ scanning. It caused downtime/ slowness for about 10 minutes and then problem went away automatically.These are some of the mess...

FMC Licensing for Air Gapped Firewall

I have a Cisco Firepower 2100 firewall and I need to operate this in the transparent mode of operation. To do this I believe I need to switch from FDM to FMC. My questions have to do with licensing. First, is part number SF-FMC-KVM-2-K9 correct...