Hi all, Need to restrict ping to my outside interface of ASA device from internet. I have tried below command but that makes my complete internet went downicmp deny any echo-reply outside
Forum Posts
Hi, I have a client who is planning on setting up multiple site to site vpn on ASR 1002 router and different remote access vpn on ASA. As the client wants to have different certificate authentication for the connections, I like to ask if anyone may ...
Does FirePower support this scenario: Decrypt-Resign with Proxy server between client and FirepowerI think that is a very common scenario.
Hi All, we use Firepower user agent to retrieve login information for users, however recently we stopped receiving user information. We had to remove the DC servers from the useragent and then add them back in again, as they were in an unavailable s...
Dear All,Can someone please recommend versions suitable for an enterprise network? Below are some of our requirements1. Control per-user bandwidth(allocate 10mbps for each client IP)2. Allocate bandwidth per URL/IP outside3. Limiting email attachment...
Hi All,I have a question to pros:In terms of security and easier configuration which option is more preferrable:using "no sysopt connection permit-vpn" and apply inbound ACLs on outside interfaceor using VPN filters?I feel more secure when there is n...
Resolved! FireSite Health Alert
I have received this error in my email. What is this?Health Monitor Alert from firesight....Time: Mon Jul 25 02:20:52 2022 UTCSeverity: warningModule: Security IntelligenceDescription: Cisco-DNS-and-URL-Intelligence-Feed received code (File Check...
hello we are working on an ASAv deployed on the Azure platform a third party has configuring VNET peering the ASAv has no directly connected interfaces to the subnets the device is protecting I am not sure what next hop to use on the inside to route...
Hi Gents,Anyone here tried fixing this error on FMC HA? "Degraded- Synchronization incomplete (This Management Center has fewer devices registered)" and also the registration status to the FTD on the secondary(standby) FMC is still on "Pending Regist...
Hello,Now ive realized our FTD cant access the cisco license server and therefore nor any module updates neither. Cant remember if mine or my bosses changes did break it.Ive looked through the policies and from my view the setup is ok, i cant find wh...
Hi All, we just got some issues and reinstall FMC and restore backup and add 2 x 2130 FTDs with HA, but we can not change device interface duplex and speed configs. Error is attached and please advise. regards
Hi all, This is the guide I followed and the problem is on the part 6 https://community.cisco.com/t5/security-knowledge-base/ise-posture-prescriptive-deployment-guide/ta-p/3680273 I have set the Radius object on FMC and assigned the redirect acl for ...
We are planning to upgrade from FMCv 7.1 to FMCv 7.2 along with our FTD 2130's and 2110's.Anyone experience negative issues doing this? ej
Hi Tech People. I have FMC with two FTD device. i want to allow the external traffic from FMC Management interface towards the internet for Cisco cloud and cisco smart account for license. My management vlan is created on the Layer2/3 switch and FMC ...
Resolved! Ise guest portal hotspot error
Hello,We are runnning cisco 2 ise nodes as pri/sec with ver 3.1.0.518 patch 1when i am connecting to a guest portal the client gets Hotspot error server cannot be reached. However, the clients and ISE guest network is in differet subnets able to reac...
