Can someone look at attached files pics and help me understand what the difference is between Dynamic Pat & Dynamic PAT (HIDE) ? It appears from this ASA config the Dynamic PAT (HIDE) was explicitly chosen for the Backup interface and I don't underst...
Hello,We have been experiencing a weird issue on our ASA when attempting to monitor the logs on ASDM. For months we have read through as many posts as possible trying to figure out where the issue stems from but so far, no luck.This particular ASA is...
hi team, i am not able to change crypto key erro mention below Cennet_Internet_Rout(config)#crypto key generate rsa modulus 4096% You already have RSA keys defined named Cennet_Internet_Router.ndpl.com.% They will be replaced. % The key modulus size ...
hi team, i am getting logs below mention 138891: Sep 26 04:38:08.045: %SSH-5-SSH_COMPLIANCE_VIOLATION_RSA_KEY_SIZE: SSH RSA Key Size compliance violation detected. Kindly note that the usage of keys smaller than 2048 bits will be deprecated in t...
Hi team , I got below mention logs in my ASR 1002 router could you please suggestion. SSH-5-SSH_COMPLIANCE_VIOLATION_RSA_KEY_SIZE
Hello , I have configured Cisco ASA 5512 with Active/Standby failover Remote VPN access. It is working fine, but the goal is that, we need to provide VPN remote access over WLAN interface with same security level on Inside and WLAN interfaces. NAT, A...
HiI have set netflow up and working ok can I reference more than one destination in the flexconfig object or do I need to create seperate objects per netflow destination.? Thanks
Hi,Currently any ip address can ssh to my asa 5505 firewall outside interface. What should I do to restrict only certain IP can? What's the command to see the current ssh management access rule?Thanks.Ye
Dear All,I configured a cisco FTD to always send syslog events to a log analyzer.However i found out that the deny tcp any any rule i configured to drop undefined traffic from that unsecure interface seem to be dropping the syslog traffic after a whi...
We have several users that connect through AnyConnect and our subscription is up for renewal. We renewed for another two years and was wondering if we need to add those to our Firewall Cisco ASA as I do not want any users to get disconnected. What is...
Hello,We upgraded our firewall to latest update 7.2.0.1-12 but then our VLANs dont work.I can see traffic of my pings, between vlans, endpoints etc but getting "request timed out" nor access anything even though i see the traffic, its like its bugged...
Hello guys I have this topology where the inside network runs with ospf and in the ftd there is both default route and ospf ?After configuring all this also my inside network cannot go to the internet or the isp ip.My question is how do i redistribut...
In my corporate environment, IT won't give permission for a switch, they wants us to lay more cable, but it's too expensive. Leadership doesn't understand and says just use WiFi. ISE of course prevents using a switch without permission; ISE will de...
Hello Experts @Rob Ingram @balaji.bandi I have ASA and running the capture for SMTP with a max buffer size of around 35 mb and with overwrite option enabled but this is not enough for my use case.I want to run packet capture which will continue for ...
Hello,I had installed Cisco FMC 6.6.4 version and ISE-PIC 2.7 version for Passive Authentication. Everything worked pretty fine but then I upgraded FMC up to 7.0.1 and ISE-PIC has some issues. When I try to integrate FMC 7.0.1 with ISE-PIC 2.7 I see ...
