Hi I have 2xASA 5585 configured with multiple context running 9.4 (1) code base. During weekend, suddenly I missed ssh to the active ASA. ssh ASA.ip ssh_exchange_identification: Connection closed by remote host debug ssh on the firewall gives Devic...
Forum Posts
Hi,I wanted to use subinterfaces in the asa transparent mode but was only able to reach the ASA BVI but not any other IP.However, when I started using physical interfaces, I was able to reach everything. The rest of the config remain the same. Is th...
What is the difference between Firepower chassis manager and firepower device manager? Like a Firepower Management Center (FMC), a Firepower 9300 Series and 4100 Series security appliance has its own web interface, called Firepower Chassis Manager. T...
Resolved! Cisco FTD Mail Events
Hello,We have Cisco FTD and FMC, version is 7.0.1I Would like to configure FTD in such way:When Endpoint device will be compromised then FMC must notify to me by Email. Is it possible?
Hi, I have enabled Decrypt known key for inbound SSL decryption and inspection (external world accessing DMZ web server).And would like to enable decrypt and inspection for outbound SSL (internal user accessing external website).However, our internal...
We followed the steps indicated in the following link for HYPER-V ASAv and it does not work. Only shows 1 interface no matter what we do. Wondering if there is a reliable and updated documentation that actually works. thankshttps://www.cisco.com/c/en...
Hi, We have the following Network design The FirePower is the Gateway for all Networks. If Traffic is send from a Client to the Internal Server it has to go through the FTD because of Routing between the Client Network (10.0.5.x/24) and the Internal...
Resolved! Cisco Firepower 2130 License
Hican I know all Licenses available for Cisco Firepower 2130 , with Smart Net support as it is good for small business ? or do u prefer other one
Resolved! ASA Dynamic NAT (Hide)
Can someone look at attached files pics and help me understand what the difference is between Dynamic Pat & Dynamic PAT (HIDE) ? It appears from this ASA config the Dynamic PAT (HIDE) was explicitly chosen for the Backup interface and I don't underst...
Hello,We have been experiencing a weird issue on our ASA when attempting to monitor the logs on ASDM. For months we have read through as many posts as possible trying to figure out where the issue stems from but so far, no luck.This particular ASA is...
hi team, i am not able to change crypto key erro mention below Cennet_Internet_Rout(config)#crypto key generate rsa modulus 4096% You already have RSA keys defined named Cennet_Internet_Router.ndpl.com.% They will be replaced. % The key modulus size ...
hi team, i am getting logs below mention 138891: Sep 26 04:38:08.045: %SSH-5-SSH_COMPLIANCE_VIOLATION_RSA_KEY_SIZE: SSH RSA Key Size compliance violation detected. Kindly note that the usage of keys smaller than 2048 bits will be deprecated in t...
Hi team , I got below mention logs in my ASR 1002 router could you please suggestion. SSH-5-SSH_COMPLIANCE_VIOLATION_RSA_KEY_SIZE
Hello , I have configured Cisco ASA 5512 with Active/Standby failover Remote VPN access. It is working fine, but the goal is that, we need to provide VPN remote access over WLAN interface with same security level on Inside and WLAN interfaces. NAT, A...
HiI have set netflow up and working ok can I reference more than one destination in the flexconfig object or do I need to create seperate objects per netflow destination.? Thanks
