Dear In what kind of situation AnyConnect Client will do reconnecting?Only when the physical link is lost or if server want to update key or else...Could someone advise?
Forum Posts
Resolved! FTD with HSRP/GLBP
Greetings,I wanted to ask whether it is possible to set up HSRP/GLBP with two Firepower 1150 FTD devices. I was not able to find any concrete answers looking around, or any recent ones. Thank you in advance.
Dear Folks, good day rising!Upon my first ever post (ever) I am excited to greet you fellows and also legends I've got my hand on an FMC that screaming for its life for lack of better words, hence i find myself upon your good council and also ideas ...
How does a File Policy or IPS Policy get applied? When one has 50 rules in an ACP that are defining "allowed" traffic does one just apply the IPS and FIle policies to each "Allowed" rule ??? Would this not overburden the Firewall having to inspect o...
I noticed strange situation, I configured netflow exporter on the asa's and snmp server for SMC to get name of interfaces, and I can see that SMC sent snmp request to device >161/udp, but device response to 162/udp. Why does it happen?flow-export des...
I participated in the project of the topology configuration below. During the redundancy test, when the link between Router-A and WAN Accelerator-A is down, communication is impossible because FPR2130-A is in active state. Please switch the Active ...
Hi all, I am trying to do a deployment that needs to use a /23 subnet. And unless im missing something super simple, it seems that the DHCP server cant do any more than a /24. I have the interface set like below results in this error Looking at...
Does anyone know of a way to export the NAT policies from FMC? Preferably with API but even a manual report would suffice. I've found some handy scripts on exporting ACP policies, but nothing on NAT.Thanks!Mike
Interested to hear if everyone is using FMCv in HA set up now that this option is available since 6.7? The second FMCv does need to be licensed - so are people purchasing the additional license for HA or going with the old school method of a single F...
Hi,I have configured a cisco asa (a virtual one) and there I have 5 internal networks (inside ASA) and then from this asa I have an interface calles MPLS which sends traffic (from and to) mpls sites. Now the question is this: I have configures NAT ru...
Hi,I'm trying to block social networking and pornography with URL Filtering to the users, but not sure why the URL Filtering isn't working. I have checked the order of the rules is correct. Has anyone encountered the same problem, I have attached the...
Resolved! Layer 2 Encryption over IPsec tunnel
In my scenario I have to encrypt the traffic on Layer 2 & Layer 3. My thinking is MACsec on the core switch up until it hits the ASA, then configure an IPsec tunnel for that subnet to reach the remote site ASA. In theory, the architecture would be as...
Hello everyone! I have a question. When I configuring this NAT rule (ASA 5545-X, IOS 9.2(4)): (masked public IPv4 addresses) nat (inside,outside) source dynamic kspd-nets_inside granit-out-nat-host destination static granit-out-nets_outside granit-o...
I am using two Cisco Fire Power ASA 5515-X last two years. But suddenly from last 3 month one Firewall has been hanging automatically. Nothing does work then. After reboot manually it does work. but after sometime same issue occurred again. I use asa...
Resolved! SFP Module FPR1120
Is there any way to get detailed info of inserted SFP module in Cisco Firepower 1120? I can use FMC or CLI.
