Hello, I am new to networking and was wondering if anyone can tell me what is the difference (like in what situation will I need to use them) amongst the following commands for cisco ASA:1. inspect icmp - for policy-map global_policy2. access-list ic...
Forum Posts
How to import a wild cart cert onto Cisco ISR4321. Tried importing via p12 but getting nothing, just error: % Importing pkcs12...Reading file from bootflash:2022.p12 How can I use terminal PEM files
Dear ColleaguesPlease suggest the missing configuration- ASA 5525, 9.1 swI am getting below syslog, with debug crypto isakmpSep 30 16:17:47 [IKEv1]Group = defaultragroup, Username = myvpn, IP = 213.133.216.168, QM FSM error (P2 struct &0x00007ffecc84...
Hello All,I currently have a Cisco ASA 5545x with FirePOWER setup and working. Now I am looking at setting up an IDS (Security Onion) and I would like to mirror all of our traffic and send it over to the IDS for analysis.The thing is... I have no ide...
Hi,I'm not able to manage FTD from its remote FMC when it fails over from ISP1 to ISP2.- 1 x FTD 1010 (7.0.1.1)- ISP1 connected to E1/1, ISP2 connected to E1/2- FTD Management Interface connected to E1/3 (routed port)- Route tracking enabled for ISP1...
Hello, We have a FTD running version 7.0.2 and use PBR based on source networks and route the traffic to different gateways. It work great for outbound traffic, but we also publish a server on the internet and for some reason PBR don't work and we ca...
如图，在局域网内是没有DNS的，客户端是通过ASA dhcp下发的外部DNS地址。内部网络中有一台服务器，和客户端是在同一个局域网中，现在的要求是Client可以通过计算机名（或域名）demo.mydomain.com 访问www server，应该如何配置ASA？Client数据太多，编辑host文件的方法不适用。
Resolved! Disabling TLS 1.1 on Windows Client
Hi Gurus,I'm a software engineer by trade. I've been assigned the task to verify our applications able to work after disabling TLS 1.1 on Windows 10 Enterprise Edition client machines. Customer will be moving on to TLS 1.2.Some detailsAnyConnect clie...
Hello,I am trying to understand why the nat from the DMZ zone doesn't work outside or inside.DMZ Host 1 with private IP: 192.168.40.99 ----> I want to translate outside with IP: 192.0.2.50, I want to ssh from outside to DMZ H1.Configured NAT from DMZ...
I am attempting to configure a BGP connection between Azure and our network. After completing the configuration on both sides I am getting the following error.%FTD-2-106016: Deny IP spoof from (10.X.X.X) to 192.X.X.X on interface outsideIt is blockin...
Just replaced a 4120 and added to FMC, applied the health policy, but still not showing any information.Tried to run the modules but nothing is returned.On the pie chart at the top, it says 97.44% Disabled.Am I missing something.
I started a configuration on an HA pair of 4110's running 7.0.1 managed by an FMC that ended up having some reachability problems between the FMC and FTDs because of some network changes that were happening concurrently. Deployment is failing because...
Is this FMC virtual Strong Encryption 3DES/AES license (L-FMCVIR-ENC-K9) included at zero cost? for Cisco 1120 NGFW Appliance. How to install and enable this encryption?
!interface GigabitEthernet1/1nameif outsidesecurity-level 0ip address x.x.x.3 255.255.255.0!interface GigabitEthernet1/2nameif insidesecurity-level 100ip address 192.168.1.1 255.255.255.0!interface GigabitEthernet1/4nameif dmzsecurity-level 50ip addr...
I have gone through the connection flag alphabets from Cisco website but I could not correlate them with real time connection logs. Someone please share some documents which has the clear info. Thanks in advance,,
