Dear all I am new to Firewall Technologies and I want to ask Regardless of statefull Firewall feature. A statefull firewall maintains the tcp state and knows a user session so why do we need to allow a user to allow in both direction incoming and o...
Dear All, I have some issue with our ASA 5525X. Users are experiencing slow Upload and Download Speed and the Speed test also showing very less speed. I haven't done any recent change in the network. We have 500 Mbps ADSL Line. As i am new to ASA any...
- FYI : https://www.cisco.com/c/en/us/support/docs/field-notices/723/fn72303.html M.
Hi all, Need to restrict ping to my outside interface of ASA device from internet. I have tried below command but that makes my complete internet went downicmp deny any echo-reply outside
Hi, I have a client who is planning on setting up multiple site to site vpn on ASR 1002 router and different remote access vpn on ASA. As the client wants to have different certificate authentication for the connections, I like to ask if anyone may ...
Does FirePower support this scenario: Decrypt-Resign with Proxy server between client and FirepowerI think that is a very common scenario.
Hi All, we use Firepower user agent to retrieve login information for users, however recently we stopped receiving user information. We had to remove the DC servers from the useragent and then add them back in again, as they were in an unavailable s...
Dear All,Can someone please recommend versions suitable for an enterprise network? Below are some of our requirements1. Control per-user bandwidth(allocate 10mbps for each client IP)2. Allocate bandwidth per URL/IP outside3. Limiting email attachment...
Hi All,I have a question to pros:In terms of security and easier configuration which option is more preferrable:using "no sysopt connection permit-vpn" and apply inbound ACLs on outside interfaceor using VPN filters?I feel more secure when there is n...
I have received this error in my email. What is this?Health Monitor Alert from firesight....Time: Mon Jul 25 02:20:52 2022 UTCSeverity: warningModule: Security IntelligenceDescription: Cisco-DNS-and-URL-Intelligence-Feed received code (File Check...
hello we are working on an ASAv deployed on the Azure platform a third party has configuring VNET peering the ASAv has no directly connected interfaces to the subnets the device is protecting I am not sure what next hop to use on the inside to route...
Hi Gents,Anyone here tried fixing this error on FMC HA? "Degraded- Synchronization incomplete (This Management Center has fewer devices registered)" and also the registration status to the FTD on the secondary(standby) FMC is still on "Pending Regist...
Hello,Now ive realized our FTD cant access the cisco license server and therefore nor any module updates neither. Cant remember if mine or my bosses changes did break it.Ive looked through the policies and from my view the setup is ok, i cant find wh...
Hi All, we just got some issues and reinstall FMC and restore backup and add 2 x 2130 FTDs with HA, but we can not change device interface duplex and speed configs. Error is attached and please advise. regards
Hi all, This is the guide I followed and the problem is on the part 6 https://community.cisco.com/t5/security-knowledge-base/ise-posture-prescriptive-deployment-guide/ta-p/3680273 I have set the Radius object on FMC and assigned the redirect acl for ...
