Hello CommunityI hope somebody can give me a hint, how to suppress logging of a certain ACE in my ASA's ACL.There are two cleanup rules at the end of my ACL.Denied access to internal addresses shall be logged (works well) and all other (to official a...
Hi Guys I was trying to create a document with Peer IP, Crypto, Private IP, IKEV version and description, tunnel status. Is there anyway to get all there details?Thank youNiK
Launching the Cisco ASAv from the AWS marketplace in GovCloud does not show the license state as "LICENSED". AWS marketplace AMIs prior to Cisco IOS v9-16 had the expected license state. The "licensed" AMIs are still available in public AMIs, but not...
Hi folks, I have newly deployed 2 Ftd's in A-S HA, via FMC.Under Device tab of FMC i can make interface changes for the Active FTD, how i can do the same for standby FTD ?I want to add a new subinterface on both FTDs, but i am unable to do the same ...
Hi,I am trying to enable http server on cisco asa v with command : http server enable but I get an error :Could not start web vpn to start ladmin listener Do anybody has some idea about it...Please suggest.. Thanks Mandeep
We have a Cisco ASA providing remote access VPN services which also uses DUO for MFA. We want to achieve the following 2x things1. The VPN group policy should be assigned based on Active Directory group 2. For shell access the priviledge level shoul...
Firepower is setup with ASA behind it. Need to setup IPSec between ASA and Outside/internet JuniperFW. I can see IKE and ISAKMP packets, but no ESP. Is this even possible:-Use FMC to traverse IPSEC for an internal ASAAny inherent policy in FMC that b...
Would like to know that Cisco codec plus is vulnerable to CVE-2022-2588/CVE-2022-2585/CVE-2022-2586 Linux Kernel LPE Flaw
Am I missing something or is it impossible to find a download for this? I have a valid cisco support account & constantly download software all the time. Can some please guide me?
If the AGE of the arp entry increases does this mean the device is offline.In this exampe the age of 10.59.33.25 is 194 Minutes and increasing.DRWEXTRTR02#sh ip arp vrf OPTUS-SIPProtocol Address Age (min) Hardware Addr Type InterfaceInternet 10.59.33...
Hello,I am attempting to create an IPSEC site to site tunnel between two sites. When i attempt to ping a host in the CoLo from Dover (192.168.10.239 pinging 192.168.190.200), the tunnel establishes, and i see bytes rx and tx on the Dover end of the t...
Dear All,On our ASA(9.18), we are running OSPF and BGP, and are redistributing BGP routes into OSPF.We want the redistributed routes to be tagged with a custom route tag. However, on ASA there is no option to tag routes using set command under route-...
Dears,I have asa-5525x with Firepower services including a URL filtering license and I have the below issue:consider a website (xyz.com) with a couple of youtube videos embedded inside it, is it possible to allow only youtube videos that have been em...
Hi Folks, In a plan to upgrade my ASA, ASDM and FMC, below are the current versions Cisco ASA 5525: 9.12(4)37, ASDM Version: 7.13(1), FMC : 6.5.0 Looking for ASA-FMC compatibility matrix
Hi Team,How can i configure MAC Address to IP Address Binding on Cisco ASA FW? I am migrating Domain controller to Cisco FW, i have configured DHCP and DNS on it. Now I have 7 IPs which needs to be configured on MAC address on this FW.
