Resolved! At end of ACL, what means "inactive"?
Hi.ACE...access-list ENTERPRISE_DMZ_IN extended permit ip host 172.16.1.1 host 172.16.1.5 inactiveAt end of this ACL, what does the command "inactive" do?Thank you!
Forum Posts
Resolved! steps to convert 4112 to FTD
Hello i have FW 4112 CISCO and have a version show versionVersion: 2.8(1.129)Startup-Vers: 2.8(1.129) and i want to convert FTD ? FPR-4112-LAN-CNBB /system # show firmware monitorFPRM:Package-Vers: 2.8(1.129)Upgrade-Status: Ready Fabric Interc...
I would like to block categories mentioned in below link. https://talosintelligence.com/categories#contentcats I checked at Security Intelligence section of FMC but do not see an URL Category in SI tab for example for Pornography. Can you help ...
Resolved! Cisco FTD 2130
Hello comm. Members,I am getting stuck when I factory reset Cisco FTD 2130 from rommon mode.Attaching a screenshot where I stuck... Any help is appreciated
Hello Team, The ASA version is not matching in 1k FTD HA pair running FTD software. Device Model: FTD 1120Version: 7.0.1 **We are getting the following warning:************WARNING****WARNING****WARNING********************************Mate version 9.16...
Hello,I have a Cisco FTD 2130. It gets in rommon mode every time I power on.I tried to boot from USB, but it's getting into looop and boot failed.Any help is appreciated.....
Hello teamI need advice about the subject.short description of our failover Active/standby cluster:Physically we have two ftd4110 (one per data center site) and our network logically separated to three segments:1. outside - acces to the internet2. dm...
Hi,I would like to log into remote server (as syslog, for example) each deployment configuration (the modifications). On my FMC, there's a section called "Deployment history" where you can see all the history changes, I want that. How can I send this...
Hello,I have an internal server on inside interface of ASA with IP 192.168.1.5 (Public IP 1.2.3.4)Access from the internet is facilitated via NAT, being translated from the Dynamic interface of the ASA PPPoE outside interface.My issue relates to acce...
hi every one ,i want to configure NAT over loadi have one public ip address 37.x.x.xand pool of private ip addresses 70.70.x.xwhen i configure natting by typingnat (inside,outside) soure (static or dynamic) ,there is no PAT configuration ,because i w...
Hello I have a configuration HA FW ASA5525 CLI and i want to paste this configuration to HA FW 4112 CISCO. Problem : my question : I make the HA cablage connection for two FW 4112 and then I copy this configuration CLI or i copy configuration...
I have a brand new Cisco ASA 5506-X that I want to setup so I need the correct licenese for Advanced Malware Protection (AMP) and URL Filtering? I guess this is correct ? L-ASA5506-TAMC-1Y CDW $373 ???Since I already have a basic Unifi network (USG...
When commissioning the two new Windows VMs. We have a problem with the deploymentThere, the servers to be installed can not reach the DNS server and it looks as if it does not go on in your customer network.It seems traffic needs to be allow from Fir...
Hi Guys,I have an ASA with Firepower Services with the use of ASDM to manage it and I tried to create a custom privilege user account. When I tried to use the "admin" account, everything is okay ASDM can login to ASA and Firepower using the ASDM howe...
Hello.On an enterprise ASA There exists at least 1 active outside int with a public IP address, that has zero restrictions on its attached ACL. I expect this interface is not advertised at all, but still, is this normal (if not best) security practic...
