Hi team,I am using the API to create an access policy with the following URL with the POST action. {{protocol}}://{{hostname}}/api/fmc_config/v1/domain/{{domain_id}}/policy/accesspolicies The data (body in the POST) is like this. The prefilter poli...
Forum Posts
Hello everyoneIP have a problem - my FXOS control drops intermittently (see the screens)Only power-off and on helps but not so long, for about 3 monthsI thought there is a bug https://bst.cisco.com/bugsearch/bug/CSCvi87019, but FXOS ver. is 2.8(1.105...
Hello.On an ASA 1120, what is the result of placing on the outside interface, an ACL with a single entry "permit IP any any"?Thank you.
Hi all, I've been playing around with the REST API for FMC today, as I need to test migration from our current ASA Platform. Ideally I'd like to use the API to bulk create subinterfaces, to save me doing it in the GIU (and to ease deployment time). I...
Would this be a legitimate Nat statement on the ASA if I have a router in parallel with the ASA on the same inside subnet? (router also has an IP from "outside" subnet). It is in parallel to take VPN load off ASA.nat (inside,inside) 1 source static i...
TAC has said that this is a bug in version 6.7 and an update is required. This behavior shown is a cosmetic error and has no real impact on your devices. It happens because of depricated features on version 6.7 This is described on the bug: https://b...
Hi,Since 2019 we are using ASA running on Firepower2120. We started with ASA 9.10.x through 9.12.x, 9.14.x and yesterday upgraded to 9.16.3.23.We have four Firepower2120 devices, and two of them are running in multicontext active/active HA mode with ...
We have the following equipment, with a number of VLANs running on top:ASA 5510|DellPowerConnect 6224 (acting as a layer 3 device to route traffic between vlans and act as switch for servers etc.)|Catalyst 2960 (acting as layer 2 switch for desktops ...
What can be an issue for partial SNMP failure. It's getting other details but at same time reporting "port count 0" uspaltwrr01dre128-cz1, SNMP: Error: Port count is 0. Incomplete data received.,Devices:0,Ports:0,UserPorts:0,NoNACPorts:0,SNMPVersion:...
I have the network configuration as in the picture. When I make traffic from 192.168.2.50 toward 192.168.1.x.the data are sent to default gw (as due): the ASA, but the ASA doesn't redirect to 192.168.2.2, the gateway for the 192.168.1.0 network.The A...
Hi.On an ASA5525 within a vanilla configuration, because of default "0, 50, 100" security levels, and also because default is "sysopt connection permit-vpn",Is there a general need to place any ACL on the outside interface?Thank you.
I have two FTDs, one with one ISP and one with two ISPs, and need to have failover tunnels between them. The internet connection fails over with SLA monitor and different metrics. The site-to-site tunnels are set up as route based with two static VTI...
I have three Subnets connected through a router in my LAN (Inside interface)route Outside 0.0.0.0 0.0.0.0 1x.1az.az.161 1route Inside 192.168.2.0 255.255.255.0 192.168.0.254 1route Inside 192.168.16.0 255.255.255.0 192.168.0.254 1route Inside 192.168...
Possibly a silly question, but I can't find the answer in the guides. On FTD with an Anyconnect VPN set up for remote access over the Internet. Anyconnect users get a private address assigned from a VPN pool as normal. Now when creating a ruleset to...
Hello, I am having a hard time finding Cisco's recommended or best-practice for this and so, maybe someone can help! We currently use an ASA with the Firepower service module. All traffic that is allowed on the ASA proceeds to be inspected by IPS. We...
