I a running into what appears to be this bug: CSCvm81052 : Bug Search Tool (cisco.com) but I am hesitant to implement the fix because I am running v7.0.1.1 FMC and the bug should have been fixed by now. Maybe I have something else going on? I ran ...
Forum Posts
Hi CommunityI am trying to connect to the ASDM web interface from a PC connected directly to the management port of the ASA5520.Below is the configuration: -1. asdm2. Management Interface3. http Server4. On the PC I have connected a cat6 ethernet cab...
Hi,I was tasked to upgrade the ASA version on a firepower 4120 that has not been upgraded ever since 2016. As I read the available documentation online (I never worked/been trained on the firepower platform) I understood that ASA is a layer that runs...
Resolved! TLS on 5520 9.1(7)
the customer have 5520 with 9.1(7) the customer is asking if he can switch from TLS 1 to TLS 1.2 , my question is what is TLS 1 and what is job exactly? and is it possible to switch to TLS 1.2 on his current setup? PS:the customer isnt using any vp...
I accidently removed an FTD from FMC that is a tunnel connected tail site firewall. I went and did a FMC restore which brings the FTD back and the tunnel is up and I can ping the mgmt interface of the FTD but I cannot deploy any configs to it. Also w...
Hello everyone,Q1) How can I block ports such as 443 on the VLAN x interface IP?1) I tried ACL on the Inbound & Outbound of the VLAN x but it does not work.2) Physical router (who hosts the VLAN X interface IP) has been configured to allow port 443 B...
I have a Cisco ASA 5510 running version 8.4(7)30. The new certificate just kicked in recently. I verified the SSL certificate through SSL Checker. It's working for our company website, as well as the VPN subdomain (vpn.company.edu). The company home...
Is it possible to bring an FPR2130 with ASA code in platform mode into HA with a 2nd 2130 in appliance mode (also ASA code obviously)?I'd like to convert the 2130 in platform mode in appliance mode. Adding HA then failing over to the redundant device...
Hi, has anyone seen the above message before, between active and standby FMCs. Thanks in advance. Pete.
I'm trying to deploy ASAv in Azure and as the docs suggest, the management-only setting should be removed from the Management interface since "...the Management interface is the only interface that can have an Azure public IP address associated with ...
Hi folks,We have a cisco ise 3.1 2 node deployment with Guest portal access via sponsor portal self-registration which is working fine. Guest is being served by Gig2 interface on ISE with separate VLAN ip address.presently, the guest registers and t...
Resolved! ssh v2
I was asked to only use ssh v2 on my cisco switch.If i use command show ip ssh it says version 1.99 and from what I read that means Im using ssh v1 and v2 so how do I disable ssh v1 and use only v2.
Hi,i just want to know ASA and Firepower are need the security license to do site to site vpn ?I noticed cisco router need the security license for VPN.Fortigate Firewall don't need the license for site to site VPN.Juniper also don't need.
hi,i need to update the local username database in a multiple context ASA.just a quick question, do i just apply the username in "admin" context where AAA is configured or in "system" context?i can see the local username can be configured in both con...
Resolved! FTD Standalone config to FTD FMC
Hey guys I have a production FTD that is FDM managed. I have added a new FTD into FMC for which now I want to grab the config off the FDM managed FTD and apply to the FMC managed FTD. What is the best way to go bout this? I could not find through the...
