Hi All,I'm doing some cleanup on an ASA5516-X and wondering if there is a way to delete a network-object from an object-group while that object group is configured in a NAT rule. Other posts on the same topic advise to delete the NAT rule then remove...
Forum Posts
I made changes to the hostname after implementation and I changed it via the FMC and via the "configure network hostname" command on the FTD but when I try to add to SNMP manager, it cannot add because its showing the old hostname which is the same a...
Hello, We have a 4412x FTD device running version 7.2.1 and managed by a virtual FMC. We are using URL filtering for both a wireless guest network and for a school network. We are not doining any SSL decryption so the user will only get our custom bl...
Hello,Does someone here is able to tell me where is the log for the connection events in an FMC 1000?If not, is there is somewhere where I could find the size of the data we have in the connection events?I need to define a rule of thumb for how much ...
Hello everyone,I'm unable to ping the outside interface's public IP from the outside. I have ICMP inspection enabled as well as the ACL "icmp permit any outside." I can ping through the device without issue. Looking at the log, it is showing:- "ICMP ...
I am learning secure firewall but I do not need it reality. So I was wondering if I buy the vsecure firewall on amazon and pay as I go with it. Is it possible to take a snap shot for backup . so that I can tear down the AWS virtual environment and w...
Recently my Cisco ASA 5515-X Alarm LED is up and Firewall not working even console also not working. What is the issue? Is it Hardware issue or another things? I upgraded from 9.12.3 to 9.12.4 but same issue is remaining. Could you anyone please help...
We have an ASA, actually an FPR-2120 running ASA code 9.14(2)4, terminating AnyConnect VPN. During an online all-hands meeting this device has previously gone to 90+% CPU and stayed there for the duration of the meeting which made it unusable for c...
Hello guys,I have a a question regarding network security using firewalls like FTD and FMC.Can I have like this kind of topology and if I do can then how many outside zone and Inside zone should I have.My purpose is just to have a redundant links fo...
Good Day All,I have a simple topology with a Firepower 1010 locally managed. Here what the topo looks like.I have port 1/1 configured as am access port on a vlan 2 ( outside - internet vlan )I have port 1/2 as an access port on vlan 1 ( inside )My DH...
My customers said that they saved their ASA 5506-X config, but its are resetted suddenly after ASA 5506-X's power turned off and on. When I first heard that story, I just thought its were human error (like they didn't save their config). But they sai...
Hi Community,We have a FPR-2130 with ASA appliance in 2 Firewall cluster. I will refer 2 Firewall as FW-01 and FW-02. Currently FW-02 is in the primary active state and FW-01 is in the secondary standby state. We need to change the FW-01 permanentl...
We are currently using the ASA active/standby mode, but ASA randomly failover due to missed hellos on the failover link. Our current timer is 200ms poll and 800ms hold. I want to increase the timer. Do I need to update the timer on both active and...
Please view attached image. (**undocumented is that a Nexus 9k lives between the ASA and the "server".)1. What might be the cause of the illustrated symptom?2. Could this symptom be caused by the MSS inconsistency =1380 outbound vs.1460 inbound?3. Co...
Hello, We have recently upgraded our FMC from 6.6.5 to 7.0.4. We then upgraded the SFRs (ASA 5516-X) from 6.6.5 to 7.0.4. The SFR upgrades appeared to complete fine and showed as green and on version 7.0.4 in the FMC. However, we received the below w...
