Dear, good afternoon. I have an FDT HA model 1010. I have Firmware 6.4.0 and I must update to a new version. The question is should I update each one of the nodes or do I throw the firmware to the secondary and both are updated? Do you have any docum...
Hi guys, We are trying to setup valuable SNMP monitoring for FPR 2100 series. Our current FTD version is 6.6.7. As we know, FPR 2100 series has x86 CPU used by SNORT etc and NPU used by data plane (ASA/Lina engine). We would like to monitor utilisati...
Hi FolksIs there a way to clear Deployment history in FMC, or Paus the recording or is there any document for retention time
I have my 1120 FW added to the FMC 2500, and I have it mostly configured. When I go to edit the interfaces, I configured it and clicked on enable, but the interface is still not going green and when I ssh into the FW it says the ports are administrat...
Hello everyone.Our Standby FMC is filling the Audit Log with Scheduling task save and Scheduling task delete every two minutes. I cannot determine why this is happening. Any help would be greatly appreciated.
I'd like to register FMC manager by FQDN but from Clish mode on FTD when I do show network command I have 2 different sections showing my DNS config. I can ping outside public IP addresses so I know routing is fine but I cannot ping or resolve extern...
Hello, I am new to networking and was wondering if anyone can tell me what is the difference (like in what situation will I need to use them) amongst the following commands for cisco ASA:1. inspect icmp - for policy-map global_policy2. access-list ic...
How to import a wild cart cert onto Cisco ISR4321. Tried importing via p12 but getting nothing, just error: % Importing pkcs12...Reading file from bootflash:2022.p12 How can I use terminal PEM files
Dear ColleaguesPlease suggest the missing configuration- ASA 5525, 9.1 swI am getting below syslog, with debug crypto isakmpSep 30 16:17:47 [IKEv1]Group = defaultragroup, Username = myvpn, IP = 213.133.216.168, QM FSM error (P2 struct &0x00007ffecc84...
Hello All,I currently have a Cisco ASA 5545x with FirePOWER setup and working. Now I am looking at setting up an IDS (Security Onion) and I would like to mirror all of our traffic and send it over to the IDS for analysis.The thing is... I have no ide...
Hi,I'm not able to manage FTD from its remote FMC when it fails over from ISP1 to ISP2.- 1 x FTD 1010 (7.0.1.1)- ISP1 connected to E1/1, ISP2 connected to E1/2- FTD Management Interface connected to E1/3 (routed port)- Route tracking enabled for ISP1...
Hello, We have a FTD running version 7.0.2 and use PBR based on source networks and route the traffic to different gateways. It work great for outbound traffic, but we also publish a server on the internet and for some reason PBR don't work and we ca...
如图，在局域网内是没有DNS的，客户端是通过ASA dhcp下发的外部DNS地址。内部网络中有一台服务器，和客户端是在同一个局域网中，现在的要求是Client可以通过计算机名（或域名）demo.mydomain.com 访问www server，应该如何配置ASA？Client数据太多，编辑host文件的方法不适用。
Hi Gurus,I'm a software engineer by trade. I've been assigned the task to verify our applications able to work after disabling TLS 1.1 on Windows 10 Enterprise Edition client machines. Customer will be moving on to TLS 1.2.Some detailsAnyConnect clie...
Hello,I am trying to understand why the nat from the DMZ zone doesn't work outside or inside.DMZ Host 1 with private IP: 192.168.40.99 ----> I want to translate outside with IP: 192.0.2.50, I want to ssh from outside to DMZ H1.Configured NAT from DMZ...
