HiWe're running version 9.18(3).Whenever we try to add a syslog server with UDP/10514 we can see that the syslog server never receives a packet.If we change the port to 514 we can see packets arriving on the syslog server. However, we would like to u...
Seems I'm having some issues configuring the syslog output correctly.My config is as follows:PPOK-EC-FW-2# sho run logginglogging enablelogging timestampno logging hide usernamelogging list vpn level warningslogging list vpn message 722022logging lis...
I'd really love to have some courses on CompTIA and Network security. Are there areas I could get them less costly? I'll like to pursue a course in network and information security.
Dear In what kind of situation AnyConnect Client will do reconnecting?Only when the physical link is lost or if server want to update key or else...Could someone advise?
Dear Folks, good day rising!Upon my first ever post (ever) I am excited to greet you fellows and also legends I've got my hand on an FMC that screaming for its life for lack of better words, hence i find myself upon your good council and also ideas ...
How does a File Policy or IPS Policy get applied? When one has 50 rules in an ACP that are defining "allowed" traffic does one just apply the IPS and FIle policies to each "Allowed" rule ??? Would this not overburden the Firewall having to inspect o...
I noticed strange situation, I configured netflow exporter on the asa's and snmp server for SMC to get name of interfaces, and I can see that SMC sent snmp request to device >161/udp, but device response to 162/udp. Why does it happen?flow-export des...
I participated in the project of the topology configuration below. During the redundancy test, when the link between Router-A and WAN Accelerator-A is down, communication is impossible because FPR2130-A is in active state. Please switch the Active ...
Hi all, I am trying to do a deployment that needs to use a /23 subnet. And unless im missing something super simple, it seems that the DHCP server cant do any more than a /24. I have the interface set like below results in this error Looking at t...
Does anyone know of a way to export the NAT policies from FMC? Preferably with API but even a manual report would suffice. I've found some handy scripts on exporting ACP policies, but nothing on NAT.Thanks!Mike
Interested to hear if everyone is using FMCv in HA set up now that this option is available since 6.7? The second FMCv does need to be licensed - so are people purchasing the additional license for HA or going with the old school method of a single F...
Hi,I have configured a cisco asa (a virtual one) and there I have 5 internal networks (inside ASA) and then from this asa I have an interface calles MPLS which sends traffic (from and to) mpls sites. Now the question is this: I have configures NAT ru...
Hi,I'm trying to block social networking and pornography with URL Filtering to the users, but not sure why the URL Filtering isn't working. I have checked the order of the rules is correct. Has anyone encountered the same problem, I have attached the...
In my scenario I have to encrypt the traffic on Layer 2 & Layer 3. My thinking is MACsec on the core switch up until it hits the ASA, then configure an IPsec tunnel for that subnet to reach the remote site ASA. In theory, the architecture would be as...
Hello everyone! I have a question. When I configuring this NAT rule (ASA 5545-X, IOS 9.2(4)): (masked public IPv4 addresses) nat (inside,outside) source dynamic kspd-nets_inside granit-out-nat-host destination static granit-out-nets_outside granit-o...
