I have FTD 1010 without center interface basically not connected to management Center interface just locally - I have configured the anyconnect and working perfectly in AAA authentication. I need to switch to certificate authentication without having...
Forum Posts
I am attempting to install a FMC virtual appliance (Cisco_Firepower_Mgmt_Center_Virtual_KVM-7.0.5-72.qcow2) on my Redhat 8 computer. When I run my installation script to configure the VM and boot I get a "LILO Keytable read/checksum error" immediat...
Hello guys!I have had multiple attempts on establishing a L2L IPsec tunnel using certs that I installed on both ASA firewalls using NDES SCEP from a Windows Server 2019 AD CS VM. The certs are RSA 2048 based with SHA 512 signature. I tried both IKEv1...
Hello All,I have two ASA ASA5525 configured as HA and i need to replace the hardware to latest cisco ASAFPR1120-ASA-K9I was just wondering if there is way i could convert current running configurations to the new firewall without spending lots of ti...
Hello , is there any compatibility between the Firepower 4100 Firmware Upgrade Packages and FXOS version I need to check on it before upgrading, and if should upgrade the Firmware packages before making an upgrade for FXOS , and what is the result...
We've configured DHCP on FTD and all the users are getting internet via DHCP ip and we want this to be blocked for MOBILE users. Please suggest how we can achieve this. Thank You in advance.
Hi everyone,I'm using ASA Cisco 5520 with 2 interfaces: inside (172.16.10.x) and outside (119.202.193.80/28)My Local Host IP is 172.16.10.200 can not Ping or Access to the Public IP (119.202.193.87) of Host 172.16.10.100, but can Ping/Access the Inte...
Hi . i have deploy two FTDv on Vcenter and they are HA as Active /standby units. when i run switch active peer as soon as it completed , i lose my outside interface ping .i checked both FTDv config from CLI and interfaces IPs from previous unit assig...
Is it possible to source a "copy tftp: flash:" command from the inside interface on an ASA?I have several ASA's in a customer network that are connected back to my own network by a VPN tunnel. I can successfully TFTP files onto other switches on the ...
Hi allI am getting an error when running the readiness check to upgrade, via the FMC, a firepower sensor running version 7.0.3 to 7.0.4: [230510 08:45:03:652] no lsm information file available[230510 08:45:03:682] MAIN_UPGRADE_SCRIPT_START[230510 08:...
Hello.I registered the AzureAD certificate SAML in ASDM and succeeded in logging in from the web browser.However, the connection failed with the following message appearing in anyconnect.can i know the cause?
Good night, In the new equipment of these models there is an improvement at the level of port security, mac assignment, blocking a port if someone should not connect to it, etc. Thanks. Regards, Ciro Gustavo Mele.
Am trying to ping asa inside interface from the remote subnet of inside zone. In short have a backbone vlan connecting core switch and asa which is the inside (from this subnet able to reach the inside Ip)Where as from inside remote subnet unable to ...
Resolved! 1150 Active/Standby failover issues
I am looking for help with my Active/Standby failover on 1150 running ASA. As you can see my fo interfaces are up up, but mate's are unknown.ASA1#interface Ethernet1/1nameif outsidesecurity-level 0ip address x.x.x.x 255.255.255.x!interface Ethernet1...
I need to order the anyconnect license for ASA FPR1140 FW, however, bit confused on that. Can someone guide me on the same ? Its for 50-100 users ?
