I have setup and have working Anyconnect with Certificate only access with Remote User VPN. These certificates are on smart cards. When the initial connection is made I am prompted to enter the pin for the smart card which is what I want every single...
Forum Posts
Hello Everyone! I am trying to configure our anyconnect VPN clients to relay to a windows DHCP server. I have about 15 DMZ relays and 20 802.1x relays that work fine from the inside. However I am having trouble getting the VPN clients to relay. I hav...
I have Firepower 1140 running ASA code 9.14.1 .when i ping 8.8.8.8 its happening but when i ping wwwogoogle.com or tools.cisco.com its not pinging.i have attached the log files along with debug dns as attachment for reference , let me know what i can...
Hi - can anyone tell me if/how the local admin password on FTD devices is encrypted?Is there any way to validate this (either way) via the CLI or FMC?Many thanks
I am new to this platform, but I am attempting to create a simple NAT rule using an object group. I have deployed an FMC/FTD 7.2.4 in EXSI and when I create a NAT rule using the object group I created I get the following error "Invalid value supplied...
I have fpr2130 which is working as ASA and some days ago it stoped to answer via snmp, but when I tried to check snmp on it I noticed that snmp was working, but it seemed as fpr2130 lost mibsFor example I checked active node and it was good, snmp wor...
I have multiple site-to-site VPNs, with multiple subnets on each, configured between an ASA-5516 and some other ASAs, some Ubiquity devices, and a Sonicwall. They are all configured with the same IKE policies and transform sets. They all work fine, e...
I used to be able to launch ASDM on a particular 5505 but now i cannot. Tried from a PC that has never had ASDM installed, and when i https to the site it says:"This site can’t provide a secure connection194.33.13.168 uses an unsupported protocol.ERR...
I have an FTD device managed by vFMC. The FTD management port connects to a Cisco 9606 switch copper into rj45 SFP. During my last two software upgrades, communication with the FTD is lost during the reboot process. The 9606 shows up/up; however, you...
Hope you can help me. I’m replacing an ASA hardware with multiple context. Iif I run show route on each context on the current firewalls, it shows static and connected routes. But looking at the cfg file file, the rstatic route and connected route is...
Could anyone explain what is the difference between "service resetoutbound" and "service resetoutside"? And when should I enable "service resetoutbound"? When should I enable "service resetoutside"?
Hello evryone! Need Help!I have already configured my FP 1120 via Firepower Device Manager - all is Ok. But after some times I receive error: On mai window of ftd my ISP icon is grey and NTP Service doesn't work - also grey! I know that there is an e...
Gentlemen need you help.We can successfully connect with anyconnect to asa. However when we implement SAML Authentication (DUO 2 Factor authentication) We cannot connect with the error Potential CSRF attack dtected.We can see this is a cross site scr...
I am working on a PoC for which I need sample netflow logs. I dont have access to any netflow capable device to generate netflow logs.Can somebody please advise where can I possibly get sample netflow logs ?
Our Issue : Arris Cable Modem - TG2492S continuously / Intermittently rebooting with Cisco ASAScenarioOur ISP recently changed our cable modem to Arris - Model TG2492S - We connected this modem with Cisco ASA ASA5506,We also tested this with Cisco A...
