I am doing first tests with the new Secure Firewall 3120 (in application mode with ASA 9.18.2.5).In these tests I am experiencing configuration replication issues in system context.When creating a new context only a part of the context configuration ...
Forum Posts
Would Device Manager Version 7.1(5) currently used with an ASA5520 on 8.4(7)30 work with the ASA5520 on 9.1.7.23? This document gives the impression any ASDM 7.1.x is still compatible with ASA 9.1.x: https://www.cisco.com/c/en/us/td/docs/security/asa...
I have a working site to site vpn between a client router and a ftd.I have a device on the router side that need to access a resource on the internet so I think there is no point on send that traffic to the tunnel to then send it to the internet so I...
We're using Anyconnect SSL VPN to ASA.* Asa inside interface is 192.168.1.1/24* There is nothing else but another firewall on the other end of "insde": 192.168.1.2* VPN clients use IP pools 172.16.1.0/24 and 172.16.2.0/24. This is mainly set up such ...
I have read quite a few articles online but I can't seem to find a definitive answer to this seemingly simple question. Unfortunately, I can't test it out on my gear either. Is it as simple as subinterfaces or is that not possible with a bridge-group...
Resolved! Radware DefensePro and Firepower 4112
Hello, I have a customer with a Firepower 4112 appliance with a FTD instance and they have asked me if it's possible to run an additional instance of Radware DefensePro in the same chassis. Anyone know if that's supported on the 4112? I'm only able ...
Hello everyone,I have a problem with my FPR, since no internet connection is established, kindly find attached photo which shows an overview of the FPR status,Model: Cisco Firepower 1010 Threat DefenseVersion: 6.4.0-102Topology: Mikrotik port 2 conne...
Hi everyone!I was wondering if anyone can help us with the below.We have several Cisco switches, APs and a Wireless Controller and we would like to kow if there is a way to automate the patching process. I have found this link here https://community....
Resolved! Upgrade to FMCv300?
I have a FMCv currently in vCenter and speced with 8vCPU and 32GB ram. I want to move to FMCv300. There are two licenses related to FMCv300: SF-FMC-VMW-25-300 and SF-FMC-VMW-300-K9. I assume I would need the “SF-FMC-VMW-25-300” in my case to move my ...
What would be the difference between an allow rule with no IPS policy selected and a trust rule? TIA
I have asked for help before on this module and did not get anywhere, but here goes again. I am looking to re-image the AP module due to the fact it is not accessible through CLI or WEB app. I would appreciate any assistance on getting the WIFI modul...
Hello Folks, I have 2 FP-2210 in HA managed by FMC and I noticed recently that one of the Firewalls has no valid SSH credentials, based on the Keepass, I want to recover that specific Firewall CLI password without reboot so I won't bother productio...
Resolved! ASAv not pingable in GNS3
Hi,I have created a basic scenario on GNS3 with ASAv and a PC but there I am troubling in ping issue from PC to ASAv or vice-versa. I am attaching ASAv configuration hostname ciscoasaenable password $sha512$5000$weTQEksgaEbyw8U3MT2a9A==$kzi7RjydjZXE...
Hi,I confuse how to work NTP traffic. My network device need NTP from window server. the firewall is between my network device and Window server .I enable NTP server service on window.So i would like to know If i open NTP port 123 on firewall for the...
Hi Guys, I have an ISRg3 WAN running IOS PKI & SCEP with flexVPN which is working well. I have tested the Hub CA with both SCEP 'Grant Auto' and 'Terminal Manual' Spoke enrolment which works great. However, I'm after a halfway house in an ideal world...
