Hello. We plan to deploy an additional FMCv to achieve HA setup. The existing FMCv manages a pair of FTDs with RA VPN configuration. The official documentation states the below, which really confuses me. About Remote Access VPN High Availability If t...
Simple setup but going me crazy since yesterday. Cisco ASA Firepower 1010 with Anyconnect integration to Azure SAML. I have followed the Cisco and MIcrosoft documents and configured exactly as mentioned (for about 5 times literally till now). While ...
Hello everybody, our customer has an branch ASA5516 (OS: 9.16(3)19) and when he try to access the ASAusing AnConnect (4.10) he get the error message window:"Certificate Validation Error" In the logging appears (complete logging attached):...No certif...
Hi All,We need to fetch the Policy export from the ASDM in the XML format for almost 200Firewalls. So thought of automating it. Which is the best way to do it? Any suggestions and inputs on this will be helpful. So the plan is automating the Login to...
Hi all,I have a site to site vpn established between CIsco FTD and Fortinet firewall (In Azure).I am facing issue in traffic leaving the fortinet firewall through the ipsecvpn tunnel interface, however, i am not seeing any traffic on the firepower, ...
Hello GuysI made this Lab in Gns3 to prepare myself for my CCNP Security examEverything work fine, I configure the FTD through FMC, I gave IPs for outside & inside interfacesalso, I have configured NAT and Static route, the issue is that FTD can't re...
HiWe're running version 9.18(3).Whenever we try to add a syslog server with UDP/10514 we can see that the syslog server never receives a packet.If we change the port to 514 we can see packets arriving on the syslog server. However, we would like to u...
Seems I'm having some issues configuring the syslog output correctly.My config is as follows:PPOK-EC-FW-2# sho run logginglogging enablelogging timestampno logging hide usernamelogging list vpn level warningslogging list vpn message 722022logging lis...
I'd really love to have some courses on CompTIA and Network security. Are there areas I could get them less costly? I'll like to pursue a course in network and information security.
Dear In what kind of situation AnyConnect Client will do reconnecting?Only when the physical link is lost or if server want to update key or else...Could someone advise?
Dear Folks, good day rising!Upon my first ever post (ever) I am excited to greet you fellows and also legends I've got my hand on an FMC that screaming for its life for lack of better words, hence i find myself upon your good council and also ideas ...
How does a File Policy or IPS Policy get applied? When one has 50 rules in an ACP that are defining "allowed" traffic does one just apply the IPS and FIle policies to each "Allowed" rule ??? Would this not overburden the Firewall having to inspect o...
I noticed strange situation, I configured netflow exporter on the asa's and snmp server for SMC to get name of interfaces, and I can see that SMC sent snmp request to device >161/udp, but device response to 162/udp. Why does it happen?flow-export des...
I participated in the project of the topology configuration below. During the redundancy test, when the link between Router-A and WAN Accelerator-A is down, communication is impossible because FPR2130-A is in active state. Please switch the Active ...
Hi all, I am trying to do a deployment that needs to use a /23 subnet. And unless im missing something super simple, it seems that the DHCP server cant do any more than a /24. I have the interface set like below results in this error Looking at t...
