Wanted to see if anyone has come across this issue. Have an ASA 5545-X running 9.12(3)9 used solely to terminate AnyConnect client sessions, there have been several incidents where the ASA outside interface would stop passing traffic and would stop r...
Forum Posts
Resolved! Adding new subnet in the ASA.
Hello Cisco Community, I have VTI setup from Cisco ASA(on prem) to Azure. Recently in azure side they add this new network 10.3.20.0/22. So now try to add this network on ASA for accessing this resource, but I couldn’t add this network? I got an erro...
Hi, our Costumer has the following Config: 2x FTD 1140 with 6.4.0.11 (HA) on FMCv 6.7.X I am unable to Deploy. It always ends in an Deployment Error like this. ChecksumFaild: "the checksum that was received from lina does not match the one received ...
Hey all,I was wondering what the best process would be to replace a failed FTD 4115 unit in a HA cluster. I am planning to undergo some firmware updates and in the event of FTD unit failure I'd like to be able to replace a failed unit with one fresh ...
Hello. Can ASA increase TTL of multicast packets while forwarding them? Sender is on the outside interface, it sends multicast with TTL = 1, receivers are all over the rather complicated inside network. ASA passes the multicast, but hext hop router d...
Hello...this is the second time I'm posting about this issue, but I do have more info now. I have been trying for over a week to get 2 ASR9k's to authenticate logins via our company's existing Microsoft NPS server via Active directory. I have stand...
How many site to site vpn tunnel we can make for FTD2100, is there any restriction
Resolved! ASA FailOver
Greetings, last week i have face a question and i dind'nt get the write answer for it, it is about the configuration of ASA firewall with FailOver, the question was, when two firewall are connected with fail over, and a originated packet from the ins...
I was asked to help migrate a ASA 5512x with firepower services that I installed while working with another company about 8 years ago. My current company (a Telco) no longer sells or installs CPE equipment, and the former customer ordered a FPR1010...
Hi All, We have an issue with the new imaged machine. Here is a brief - We have a users and management tunnel with user certificates for the users and machine certificates for the Mgmt tunnel - User tunnel auto connect when the user logs in, and of ...
Resolved! Cisco 1010 port forwarding issue
Upgraded from ASA - 1010 firepower - Not able to get port forwarding correctly! please see attached Access list and NAT - firepower# show run natnat (inside_2,outside) source static DSM-OVPN interface service _|NatOrigSvc_07ad74-b908-11ed-aee3-6da23...
Resolved! Deployment failures on SFR via FMC
We are seeing intermittent deployment failures on 3x SA5516-X with SFR. They are on 7.0.1 with Snort version 2 currently. The error witnessed during failures in the FMC UI is: "Deployment failed due to configuration error . If problem persists after...
Hi We have recently launched cisco firepower 1150 (Version 7.3.0) for one of our sites and sometimes strange problems happen for it. One of it’s interface doesn’t work properly. For example STS VPN between cisco ASA and firepower disconnects and remo...
Do someone know if it's possible to activate a CA on FTD (7.0.0.1+) to generate Identity User Certs (OTPs) like Cisco ASA used to done?...
Good day, Is is possible to configure the FTD 1120 version 6.7 with dual ISP links for users with the anyconnect client to connect to the FTD using either ISP. Looking at the configurations, you can only configure one outside interface for the globa...
