Hey Guys I am replacing Firewall ASA NAT with Firepower based FTD can someone explain 1) In the below Auto NAT rule I cannot create a Duplicate rule to allow Destination Interface Backup. It will complain in Firepower that duplicate source cannot be ...
Working on a FlexConfig for EIGRP, have managed to work my way through most of the configuration.Still having issues with a couple commands....1. passive-interface $outside2. distribute-list $acl outwhen i try and deploy, the failure log always shows...
Hi,i'm trying to configure AD agent, but always return the following error appears: I checked LOGs of agent, the follow message appears: "26/09/2015 20:48:23","debug","[0001] - Error connecting to 192.168.0.15: System.Management.ManagementException: ...
Assume these are applied to my Gig0/0.98 svi on my router for wireless devices.Interpret my acls! What is going on there? Am I missing anything?Make recommendations for improving these acls.How would I configure on a router?I have uploaded notes an...
I have existing FMCs. I have a requirement to build new FMCv after current devices retire. What is the best method for sizing for future vFMCs. Basically I need to know aside from managed devices what logs/events/storage/connections I have to look at...
Hello, Can someone please advise if it is possible to configure ECMP static routes on FDM v6+? We can see on Cisco's config guide for the device manager that we can have up to 8 equal cost static routes per interface, however we are hitting an error ...
I am trying to change the password of a user in the ISE repository automatically.I am trying to change the password from the CLI as follows, but it is not reflected in the GUI after setting.ise/admin# configure terminalEnter configuration commands, o...
I see in the intrusion policy something called edge phoenix as a choice but cant find any good documentation explaining about it and how to use it.
Hi all,I won't bore you with the full story, but I accidentally deleted a policy from our FMC (Devices > VPN > Remote Access)I have not Deployed it, so I'm assuming that the policy is still in place on the Firewall itself.However, I do not know how t...
Replacing a customer's enterprise ASA with FP Services firewall with a new 2130 FTD. Current FW configured to allow SSL/AnyConnect traffic inbound from Outside interface to pass through to an internal ASA Headend. This has been working fine for years...
HIASA in multi context mode, need to upgrade i'm assuming everything is done from within system context, anyone have a step by step guide for upgrading the ASA in multi context mode please.??Thanks
Hi all, We have a 5508-X SFR module registered to an FMC using classic licensing, which has now expired. We have added smart licensing to the FMC which worked fine, however, the SFR is still using the expired classic licenses. I was thinking that if...
Hi,I configured RA VPN (AnyConnect) using Firepower 2130 FTD and Active Directory. All used belonged to the right group can connect to VPN using AnyConnect. They can access to our ressources (RFC 1918).When I add Microsoft NPS as Radius servers to fo...
Hello! I am using Packet Tracer 8.2 and am trying to learn ACLs without success.These is the ACL on the Router 2:Extended IP access list denywww10 permit tcp any host 192.168.2.2 eq www20 deny tcp any host 192.168.2.2 eq 2230 permit ip any any (2 mat...
Hello everyone, is it possible to upgrade Cisco Adaptive Security Appliance Software from Version 8.6(1)2 to 9.6.1. The 9.6.1 release does not have release notes included on Cisco website as per screenshot. Thank in advance for any suggestions.
