Hello, We have a FTD running version 7.0.2 and use PBR based on source networks and route the traffic to different gateways. It work great for outbound traffic, but we also publish a server on the internet and for some reason PBR don't work and we ca...
Forum Posts
如图，在局域网内是没有DNS的，客户端是通过ASA dhcp下发的外部DNS地址。内部网络中有一台服务器，和客户端是在同一个局域网中，现在的要求是Client可以通过计算机名（或域名）demo.mydomain.com 访问www server，应该如何配置ASA？Client数据太多，编辑host文件的方法不适用。
Resolved! Disabling TLS 1.1 on Windows Client
Hi Gurus,I'm a software engineer by trade. I've been assigned the task to verify our applications able to work after disabling TLS 1.1 on Windows 10 Enterprise Edition client machines. Customer will be moving on to TLS 1.2.Some detailsAnyConnect clie...
Hello,I am trying to understand why the nat from the DMZ zone doesn't work outside or inside.DMZ Host 1 with private IP: 192.168.40.99 ----> I want to translate outside with IP: 192.0.2.50, I want to ssh from outside to DMZ H1.Configured NAT from DMZ...
I am attempting to configure a BGP connection between Azure and our network. After completing the configuration on both sides I am getting the following error.%FTD-2-106016: Deny IP spoof from (10.X.X.X) to 192.X.X.X on interface outsideIt is blockin...
Just replaced a 4120 and added to FMC, applied the health policy, but still not showing any information.Tried to run the modules but nothing is returned.On the pie chart at the top, it says 97.44% Disabled.Am I missing something.
I started a configuration on an HA pair of 4110's running 7.0.1 managed by an FMC that ended up having some reachability problems between the FMC and FTDs because of some network changes that were happening concurrently. Deployment is failing because...
Is this FMC virtual Strong Encryption 3DES/AES license (L-FMCVIR-ENC-K9) included at zero cost? for Cisco 1120 NGFW Appliance. How to install and enable this encryption?
!interface GigabitEthernet1/1nameif outsidesecurity-level 0ip address x.x.x.3 255.255.255.0!interface GigabitEthernet1/2nameif insidesecurity-level 100ip address 192.168.1.1 255.255.255.0!interface GigabitEthernet1/4nameif dmzsecurity-level 50ip addr...
I have gone through the connection flag alphabets from Cisco website but I could not correlate them with real time connection logs. Someone please share some documents which has the clear info. Thanks in advance,,
Hi everyone, I am new beginer for Cisco anyconnect. Recently, we have a situation. we are using anyconnect (vpnclient-winx64-msi-5.0.07.0440-k9) on Microsoft windows server 2016, which is worked. Now, we will migrate to new server windows server 202...
Hello Community,on an FPR-1010 device (Version FTD 6.6.1), managed by FDM I want to do a simple static load distribution by using policy based routing.On CISCO ASA it is easy like this example:interface Vlan1 nameif inside policy-route route-map RO...
Cisco ASDM-IDM Launcher v1.9(5) not working
I am hoping I can get someone here to clear this up for me. I have discussed this in previous threads and I am still confused. The confusion I have is this. I am staging FTDs off the same subnet the FMC resides in so therefore to apply my configured ...
We are switching to an ftp server to replace an ancient tftp server to backup our configs to. Most of our switches are set up to write to this new ftp server, but I'm having some trouble with our ASAs. I can't seem to figure a way to write the config...
