Hiif I create a new user defined Virtual Router on FTD 2100, can I still use the exsisting ACP for the interfaces in the new Virtual Router ?, so ACP for both gloabal virtual Router and user defined Virtual Router, and also create security groups and...
Hicurrently on 9.8Hello another ASA 5500x question, so no interim upgrade required, but target version because it as the x in brackets does this mean I can upgrade to any version in the major version.?? and also whats the best/safest practice for thi...
Hi everyone, I have my cisco ASA 5516 with version 9.7 (1) 4. I am trying to configure the ASA for BGP Authentication, but when I try to enter the TCP map range 19, It says that this range is not valid as shown in the attachment of this post. How can...
Hello.GIVEN:Packet1 tries to reach server2 (72.16.139.5) that lives remotely through a L2L tunnel. The packet travels 4 hops through the LAN to an ASA-5525.ASA-5525# sh routeGateway of last resort is 1.1.1.1 to network 0.0.0.0S* 0.0.0.0 0.0.0.0 [1/0]...
I am trying to build an ipsec tunnel in IOS XE 17.6.3 using hostname but I get a keyring not found error. Is there a way to do this without having to use the IP? Non-working: crypto ikev2 keyring zscaler-keyringpeer zscaler-peerhostname sea1-vpn.zsca...
I was advised by TAC to upgrade some v7.0.1 2140's to v7.1 to bypass some Snort2+3 Bugs.This obviously involved upgrading the appliance FMC 1600 to v7.1 first, which went fine, but now when I open a Policy, the search bar function does not work. By t...
Hello i am running FMC 7.2.0 with VDB 361. After the VDB was updated to 361, we had an issue with a URL that was previously working. This URL domain was being blocked under a Policy Rule for Application blocking on Category "Burnbook". This URL has n...
we want to upgrade our FMC from 7.0.2 to 7.0.5. FMC is showing in health that smart license usage is out of compliance as we are using extra threat license on one ftd. is there any issue if we go for upgradation or we can go for upgradation. please h...
Hello.ASA-5525: What is exact procedure to paste a 200 line ACL into the existing config?Thank you.
Hi guysI have come up with a solution to get my Corporate traffic into Azure by way of a VPN, which will terminate on a HA pair of ASAv firewalls. I need to protect an HTTPS flow within the tunnel and have it decrypted on the ASAv.The flow would be o...
I have an ASA 5515-x and added module ASA-IC-6GE-SFP-A. From the CLI, the interface is showing as GigabitEthernet1/0, and when I enter the command "media-type SFP," it says invalid input. The ASA has an SFP connector, which is up and running. Is ther...
Hello. Can ASA convert multicast to unicast traffic, i.e. forward multicast as unicast packets? A server on the outside sends traffic to multicast address, but software on a host on the inside that needs to receive the traffic is only capable of rece...
A thread on these boards: A reporter states that both ASA interfaces have same security level of 100. The solution was..."You are missing NAT statements between inside and LANDHP. Please configure identity NAT between the interfaces:static (inside,LA...
current 5545X versionasa984-41-smp-k8.binwould i be better upgrading to asa984-48-smp-k8.bin which is a jump of 5 versions, is this the safest way, or could i jump straight to asa992-85-smp-k8.bin,or even to asa9-10-1-44-smp-k8.bin, then keep jumpin...
Hi team, We've encountered some "weird" issue. Our customer have FTD 7.0.5 managed by FMCv 7.0.5. But client that through FTD cant access certain website (example linktr.ee) by browser we've already tried : -bypass the URL + IP address on Prefilter &...
