I am unsure of how I need to erase all the configurations then reload them. I am also unsure of how ACL needs to be added on. Attached are the packet tracer and the Word Document that has the instructions. Any tips or hints are really helpful. Also ...
Forum Posts
Hello, I have a FTD 1010 that is not able to determine what tenancy it should fall within upon registration with Smart Licensing. I can see the device as registered and licensing applied but this error persist. The device is running 7.0.1. I also not...
I have a Cisco FTD managed by FDM, when setting up Remote Access VPN I can only select one outside interface from Global Settings, I have two ISPs and I want to publish the VPN on both outside interfaces, is this even possible with FTD? I'm really st...
Resolved! Hoe to get cisco ASAv demo license
Guys I am running cisco asav unlicensed but it is restricted to 100 Kbps. Please help me with the procedure to get demo license for it.
How can i find the object-group or object-groups an ip address belongs to/is part of in an ASA running conf ?eg. sh run | i ip address or sh run object-group | i <ip add> gives me the below outputnetwork-object <ip add>network-object <ip add>network...
Hi Guys, I am trying to build firewall rules based from the data collected from our Syslog servers. Problem is our firewall ASA 5516-X is unable to display the catch all rules in our syslog. We usually filter the Catch All logs (permit IP any any) us...
Hi, I would like identify each node that is sending out syslog. Currently the FMC is configured in the Device platform to use the hostname.I've read the following in a number of Cluster documents :- "If you configure logging to use the local-node nam...
When we enable FIPS on our Nexus 93180LC-EX after reload we are unable to SSH into the box. We have to console into the box and remove the FIPS command in order to get back into the box via SSH. Has anyone else experienced this issue before? Are we...
I got below vulnerability in one of the FTD 2110 configured as Transparent Firewall Vulnerability :: SSH Server CBC Mode Ciphers Enabled. The SSH server is configured to support Cipher Block Chaining (CBC) encryption. This may allow an attacker to re...
Hello our switch Cisco WS-C2960L-SM-24PS has this vulnerability and the recommended solution to this is to obtain new SHA-2 signed SSL/TLS certificates to avoid web browser SSL/TLS certificate warnings. Can you please guide me on how to do this or su...
Resolved! Macsec frames being blocked - Bypass?
Hi all, hope to find everyone wellI'm currently having an issue where I have two switches Catalyst 9300 connected to each other via two radios (little image exemplifying the connection) but I'm having issues applying MACSec between both switches. I w...
We recently updated our Cisco Firepower FMC and ASA sensor to version 7.X and realized the the User Agent software is no longer supported. I've been researching this and it seems that the new alternative is to use the ISE product. We have active supp...
Hello Fellows, I need your suggestion before moving forward with the migration Tool use. 1) I have existing FTD running in FMC 2600. I am planning to add new FTD on same FMC, if i start migrating ASA config to new FTD, will it create new ACP or prefi...
Hello So, I wanted to figure something out here. Currently I have an ASA-5508-X w/ Static WAN IP. I have PAT to LAN 192.168.1.0 Subnet which connects to L2 Switch.. Plug N' Play in a sense. Whatever I plug it, it has always grabbed it's unique IP add...
Helping on a project that has a simple requirement — to lock down our switches and routers to have 2FA for administrator access. But, we’re out of our element on implementing this – and could use advice. We do not have any sort of directory right no...
