Hello guys,I have a a question regarding network security using firewalls like FTD and FMC.Can I have like this kind of topology and if I do can then how many outside zone and Inside zone should I have.My purpose is just to have a redundant links fo...
Good Day All,I have a simple topology with a Firepower 1010 locally managed. Here what the topo looks like.I have port 1/1 configured as am access port on a vlan 2 ( outside - internet vlan )I have port 1/2 as an access port on vlan 1 ( inside )My DH...
My customers said that they saved their ASA 5506-X config, but its are resetted suddenly after ASA 5506-X's power turned off and on. When I first heard that story, I just thought its were human error (like they didn't save their config). But they sai...
Hi Community,We have a FPR-2130 with ASA appliance in 2 Firewall cluster. I will refer 2 Firewall as FW-01 and FW-02. Currently FW-02 is in the primary active state and FW-01 is in the secondary standby state. We need to change the FW-01 permanentl...
We are currently using the ASA active/standby mode, but ASA randomly failover due to missed hellos on the failover link. Our current timer is 200ms poll and 800ms hold. I want to increase the timer. Do I need to update the timer on both active and...
Please view attached image. (**undocumented is that a Nexus 9k lives between the ASA and the "server".)1. What might be the cause of the illustrated symptom?2. Could this symptom be caused by the MSS inconsistency =1380 outbound vs.1460 inbound?3. Co...
Hello, We have recently upgraded our FMC from 6.6.5 to 7.0.4. We then upgraded the SFRs (ASA 5516-X) from 6.6.5 to 7.0.4. The SFR upgrades appeared to complete fine and showed as green and on version 7.0.4 in the FMC. However, we received the below w...
Hi all, Currently running 6.2.3.1 on a few 2110. Seeing this in the logs. Mar 17 16:26:18 fp2110 : %ASA-3-199015: Mar 17 16:26:19 fp2110 FPRM: <<%%FPRM-3-APPINSTANCE_NOT_RESPONDING>> [F0190][major][appinstance-not-responding][sec-svc/slot-1/app-i...
Hi All On ASA 5516 with 6.2.3.6 is there any limit on creating network object or network groups and assigning them to security policies? We need to add, to an existing block rule, more than 950 IP addresses ( as hosts) and then assign them to a poli...
Hello, i've tried every compination with these ASDM & ASA Versions: 105 -rwx 25629676 18:20:30 Oct 07 2019 asdm-752-153.bin106 -rwx 111034368 08:58:00 Oct 22 2018 asa983-11-smp-k8.bin107 -rwx 32738244 08:59:54 Oct 22 2018 asdm-792-152.bin108 -rwx 341...
Hi guys,I have FCM with 2 clusters of FPR (active-standby) you can see on the screen:I am not able to connect with SSH. I Tried connecting with SSH (putty) to all four IP addresses: (192.168.5.38, 192.168.5.34, 192.168.5.37, 192.168.5.33), but witho...
Hi,I have DOT1X authentication configured on all switch ports (Both data & voice VLAN). I also have Cisco IP phones.My requirement is: to allow Cisco IP phones without DOT1X authentication. I have tried using "authentication host-mode single-host", b...
How do I export this cert? I need to upload it onto cucm. thanksThis is a stand alone FTD. It's not on FMC.
How can I generate a csr request for a web certificate? I could not find where it is generated
Hi All,Can someone tell me why you cannot set up a NAT rule on the ASAs with the destination address being a FQDN?I want to allow some internal addresses to bypass our proxy to go to an external address and thought this would be the best way to do it...
