Hi,I am facing some NAT config issues; the scenario is as follows:I have a vm server(3.20) in AZurDC wants to access to URLs with another entity via ISP tunnel. I have a single NAT ip address(60.43) which is being natted on the FMC with NAT policy 1 ...
Good day! At work i have cisco as 5506 (ver 9.6(1)) actually configration is working. i have 3 differnece inside network (2 of thm vlans) and 2 isp ( one isp is now out of service). at vlan 10.103.2.0 int 2.1 is gateway for this network and confiured...
Say I have a pair of FTD 4k with two container instances running (v7.2). Each instance is running HA between the two physical appliances and each instance has etherchannel made of two interfaces. From what I read, the individual interfaces can be ad...
It is my understanding that using "crypto key generate rsa" will generate two keys for use with SSH. One is a private key stored in NVRAM which cannot be accessed, and the other key is a public key. I believe this command should generate one general...
Hello All,I'm doing a lab in my GNS3 just built ASA active and standby which is no issues but when i try to access the outside ip address which is the ISP i cannot ping it from inside interface but there is no proble from outside interface.I though i...
I have a Cisco Firepower 2110 and would like to have a backup internet connection. I don't want it to be a redundant system, I basically just want it as a fail safe in case our primary internet connection fails. Example, to be clear: If Ethernet1/...
This is an interface object that I am trying to delete. When I do, it fails stating that it is in use in a "Filter". It is not a prefilter or a url filter. I can not for the life of me find the filter that it is referring to so that I can remove th...
Has anyone re image the FMC from a bootable DVD before? How did it go? Thank you
I understand that since the FTD User Agent has been deprecated the new FTD user identity options are either ISE (with at least the Advantage license) or ISE-PIC. Does it matter which option you choose if you are managing the FTD via the Cloud-Deliver...
Is it worth climbing the Cisco ladder for security or is it worth focusing on the cloud based certifications ladders such as the AWS ? I personally am interested in pen testing. maybe forensics. And still love my hardware . But alas outdated or dead ...
Hi all,I faced a problem when replacing a primary ASA with an RMA unit and want to know where I did go wrong.This is what happened:The secondary unit was active and had all the config.Installed the new primary unit, configured fail over, connected th...
I was wondering if there is a way to view the means of communication behind the web apps available in firepower? For ex today I was researching how to only allow specific VLAN access to windows updates. I started by searching google and one guy gave ...
We have an ASA 5508-X running 9.16(4)18 that's only being used for client VPN traffic.We have a system that has privacy information on it, and the group policy requires all connection to the server to be encrypted. The problem is, all connections tim...
hi,i am having ftd's managed via fmc running ver7.0.1 and the FMC is configured too forward vpn logs to syslog server which is a forescout NAC appliance.Since we are not getting any logs in the destination, i want to know how to verify the vpn logs a...
I am using Cisco Firepower 1120 in High Avalability using FDM to managed the device, but time is showing incorrect as my standard time. It want to change to UTC 5 30, but cannot found any option to change.I tried to change from Fxos as per below scr...
