Hello:I have two ASA 5515-X running 9.8(4)35, one of them support ECDHE-xxx cipher, but the other one does not show ECDHE-XXX ciphers, when I ran show ssl cipher highAny suggestions?James
Forum Posts
We recently installed new FTD's and have the option enabled under the Advanced Settings of our ACP for "TLS Server Identity Discovery". Yesterday, we had an external user who was having issues accessing our main website. FMC logs showed allows and ...
We were having problems tonight and suspected problems with the active Firepower, but it ended up being an application issue. In the process, though, I ran across a red circle with an "!" for "Configuration Memory Allocation - Test Failed" for both 4...
Hi everyone,I'm trying to whitelist Facebook from Social Networking by creating the above rule to allow it, but it didn't work, although the ACL has been hit, the webpage can't load. I'm thinking to use a wildcard mask, like "*facebook.com" but seems...
Hi., I have a problem. my ASA firewall doesn't send traffic to syslog server for UDP 514. however, it seems it works on other ports because I can see the checkpoint firewall showing the flow as it is the next hope.we have two syslog server. it doesn'...
Hello, PreviewI have some issues with passive user identity between FMC and ISE. I have configured a realm and I use ISE as identity source with PXGrid. Both the realm and PXGrid is working and if I go to Analysis->Users, I can see the users there. H...
Hi, I want to deploy ASA with HA Active/Passive in FirePower 4112. When deploy the ASA instance in FirePower, do I need to select 'Cluster' as device mode? Or just select standalone and then configure the HA in the ASA CLI? Thanks Arie
To whom who may help me Problem Description: Mapping IP addresses to users are not happening. Scenario: Two pairs of ISE 1.2 with patch 7 and using a CDA patch 2 in order to map users that do not directly login into Active Directory. I´m using t...
Resolved! runnig CISCO ASA ASDM module
Hi All I have cisco ASA 5510 firewall running 8.4.7 ios and I want to configure ASDM however I install different asdm and asdm idm launcher and none of them are working, is there any compatibility matrix for the ASA IOS & ASDM version?
I would like to know what is the best way to schedule remote backup of FMCs and FTDs? Also how to do remote snapshots. Any suggestions!
Hi All,I would like to ask a question regarding an upgrade of ASA code from pre 8.3 to post 8.3 config coversion.I have many NAT statements which are self Natting below is the example. Can they be removed before converting the config to 8.3+ version ...
I am unable to ssh to any of my FTD firewalls via their management (diagnostic) interface. The ssh login screen popped up but all of them say access denied. I am very sure the password is correct, even tried a different account, it didn't work too. ...
Hi Everyone, On Cisco ASA i see below configsh logging settingSyslog logging: enabled Facility: 21 Timestamp logging: enabled Standby logging: disabled Debug-trace logging: disabled Console logging: level critical, 7665441 messages lo...
I Have 2 ftds in High availability Managed by FMC. PROBLEM When there is flap on the network. Both FTDs become the active (FTD 1- Active and FTD 2 - Active) INSTEAD of being FTDs being in FTD Active-Standby (FTD 1 -Active and FTD 2 - Standby) and ...
Resolved! ASA Dynamic VPN policy
I have a DC ASA running Dynamic VPN tunnels. In the config I can see many crypto ikev1 policy 1 - like crypto ikev1 policy 10, crypto ikev1 policy 20 All has different DH group, hash etc. When a remote/branch device authenticates to this DC ASA, whic...
