Commands Used for IPSec VPN :crypto ikev1 policy 1authentication pre-shareencryption aes-256hash shagroup 2lifetime 86400tunnel-group 2.1.1.2 ipsec-attributesikev1 pre-shared-key *****crypto ipsec ikev1 transform-set TSet-1 esp-aes-256 esp-sha-hmac--...
Forum Posts
ASDM Version 7.1.2Trying to see log of a blocked packet. testing use port 22,23,3389. using putty on those ports.ASDM logging debugno access rules to allow anything.access rule to deny from any to any logging debugports 22,23 show as denied (severi...
Is there an easy way to stop balloon messages from appearing on the agent? I know you can manually right click on the icon, Just wondered if theres a policy you can create or setting you can change on the agent kit.Thanks
Hi,Does Anyconnect licenses can be preserved and swaped when upgrading from ASAv10 to ASAv30 ?Thanks in advance.
Hello to anyone who stumbles across this post, and thanks for any insight in advance. I was wondering if there was anyway to run default fx-os commands (like show version, show blocks, show cpu, show memory, show snort statistics) while in expert mod...
Resolved! Cisco FMC & WinSCP
I have connected WinSCP in a previous version of firepower. The version 6.6.1 I am trying to connnect to using WinSCP says i'm authenticating but it won't connect. Is anyone using WinSCP anymore or is there something better that can be used???
I performed the FMC upgrade from version 6.6.5 to 7.0.4 and for 4 days it is still stuck at 39%. Has anyone had the same problem and would know how to go back to version 6.6.5 or complete the upgrade? Current Version: 6.6.5Upgrade Version: 7.0.4Elaps...
I config ASA 5510 access internet follow guide in youtube but ASDM no menu "Network Object" how i can config access internet.
Resolved! Cisco ASA Create ACL for DNS
Hi, I am trying to limit all of my DNS queries from my inside network to only go to certain DNS Servers on the internet and deny any other DNS request. So in the ASDM I crated 2 network objects and created a network group with the 2 DNS servers I wa...
Resolved! cisco firewall to connect java
Hi, I am fresher, Can you any one tell , java code to allow the traffic from cisco firewall, Where to I do that ,It is possible to use cisco packet tracer to do that. or use any other platform to do?Can you explain briefly
Resolved! FMC SSL inspection
HiIf we were doing SSL inspection using Decrypt-Re-Sign, in the logs would i see the FTD's IP address connecting to external sites and not the users IP address as I see now.?Also I read theres an hit on the CPU when doing SSL inspection is this ve...
Resolved! Ping through ASA
i have a problem as i permitted PING by the following commands:icmp permit any echo admin-outsideicmp permit any echo-reply admin-outsideicmp permit any echo admin-insideicmp permit any echo-reply admin-insidei can ping from outside (PC) to the insid...
Resolved! Cisco FPR-2110 as router on a stick
Hi, I want to know, can we use FPR-2110 firewall as router on stick?
Hello, Can someone explain to me the difference between those two features:Rate-Based attack prevention:https://www.cisco.com/c/en/us/td/docs/security/firepower/70/configuration/guide/fpmc-config-guide-v70/detecting_specific_threats.html#ID-2236-000...
