hi, I have problem with jabber behind zone based firewall ..... sip registration is down after 15 min. It works ok if there is no fw in between. I gues it has to do something with some default timeout, but cannot find default timeout valuest for zone...
Forum Posts
Resolved! Cisco ASA 5506 ASDM port forwarding
I am trying to do port forwarding using ASDM by referring some YouTube video but it give error. Is there any article or example can help?
Information on securing CISCO switchports. I saw that it was possible to set more than one additional MAC address for a port, and if another MAC address connects, the packets are blocked. Unfortunately I have a lot of PCs and servers, which becomes t...
Dear Experts, For some reason, Rules in ACL doesn't work especially rules with AD account. (Users)For example, We have allow rule for indeed.com and lilnkedin.com for specific users, and last rule covers block those websites. However, linkedin.com is...
Hello Team! I got a Cisco FTD cluster (managed by Cisco FMC) deployed in Azure. I have configured loadbalancer so that the traffic is evenly balanced between the two FTDv devices because there is no concept of HA in Azure. The loadbalance are probing...
Dear Support, I would like to open a new case about this subject because I have to put over 1500 objects (url, network, host, range) into an FMC (v 6.2.2). The goal is to migrate from an ASA cluster to a Firepower 9300 cluster. And for that, I us...
Hi all, I my firewall (Firewpower) in the G0/0 I configured the interface 192.168.100.250/24, this is directly connected do my router 192.168.100.245/24 , from the Firewall I can ping my interface but I cant ping the ip from the router, I also tried ...
In the process of RMAing a 5508 that was running FTD code and wondering what the best way to replace it would be. The device was previously managed over a vpn tunnel and the management interface was used (used registration code and nat-id which I ha...
I want to replace an ASA5505 which is connected to a Trunk Port on a Cat 3750. The FP1010 runs SSP Operating System Version 2.10(1.162), and Cisco Adaptive Security Appliance Software Version 9.16(2) on top. 5505:interface Ethernet0/0 switchport tr...
Hi all, My organisation shared some hardening points for Cisco ASA firewall and wants to implement them. Basically i need to know the impact of that command in production environment. 1) Point : Ensure 'noproxyarp' is enabled for untrusted interfaces...
Hi Alls, I have a question when I try to connect 2 group of redundancy Firewall as picture below. I never try before. Is it possible to connect like picture and what I need to configure in both side? Thanks in advance, and have a very nice day!
Can I use syslog for collecting connection events [eg. Connection event, IPS event, SI event, Malware event etc] instead of eStreamer ? Are there any connection log events that may be missed if I use syslog ?My understanding is that the FMC/estreamer...
Hi , can anyone please help to advise how to renew cisco asa v9.12 remote access vpn (ipsec) certificate through asdm? we use certificate to do vpn authentication, now certificate on asa is expired, need to renew, thanks in advance.
Resolved! Cisco FTD interfaces monitoring
Hello Team, I got two Cisco FTDs being managed by Cisco FMC. I'm looking for a way to monitor the interfaces (inside and outside) of both FTDs when there is change in their status i.e. Up, Down, when there is no traffic passing through them etc. I ...
Hi guys, Can someone point me to recommended ASA version for ASA 5555, as I don't see any version being starred in the download section? Thanks a lot!Milos
