Currently we have a pair of ASA5525 with SFR setup in High Availability mode but have forgotten what the SRF password is.We understand that in order to reset the password on the SFR you login to the ASA and then run the command session sfr do passwor...
Forum Posts
Resolved! Default FlexConfig Policy?
Hello. I'm creating my FIRST FlexConfig policy. But when I try to assign it to a device, I'm getting the following message: "Following devices already have assignments listed below. These devices will be reassigned to the current policydevice: impf...
Dear All, We brought three 1140 firepower appliances and are facing difficulties with setting up devices. As we are unable to access firepower chassis manager using the browser and below are the details: Try1: Given IP under the Management Interfac...
Hi All Im trying to establish a basic connection between an 1140 Firepower (with ASA image) and a 9300. Simple point to point /30 with Ospf 1 process, Is there some additional work that needs to be done when using a FP device rather than the traditi...
Hello,I have the following situation. We have at work a subnet (192.168.0.0/24) used by all equipment ( wifi devices, mng for switches, printers etc ) . We have a cisco firepower 1010 and a cisco sw. I created on ftd 1010 on interface Ethernet1/5 tw...
Hi to all, I have a problem after upgrading the ASA5505 unlimited to 8.4.1, the message shown after startup is:IO memory blocks requested from bigphys 32bit: 9672It has 512 Mb of ram and this is the view from sh ver: Cisco Adaptive Security Appliance...
Hi All, My client has given me some mcafee url's which needs to open from asa firewall to communicate. But here im facing an difficulty to telnet such urls on port 443 from firewall inspite i have no port restriction rule for outbound traffic. Can an...
Dear Community, I have SIP inspection enabled on my Cisco5516. Now we are migrating different service provider on my SIP server for which we using different SIP ports rather than default one tcp/5060 which is already configured for ISP-1. Now we are ...
Resolved! Site To Site Threat Defense Tunnels
I am creating new Site to Site Tunnels as a mesh for 4 Sites (At least I hope I am lol) . Anyways when I start the process it ask if i wish to do Firepower Device or Threat Defense. All tunnels that are in place that I am attempting to bring over are...
After we implemented two factor authentication, Cisco DUO for ASA administration, we are no longer able to download ASDM from the GUI. When we go to https://x.x.x.x, we get a prompt for username and password, but was not able to download the ASDM fr...
Hello,I'm new to the community here and I've tried searching but have not found much that specifically answers what I'm going for. I have a firepower 1010 unit--a few actually--that we run our alarm panels through. These are DMP XR-550s and XR-150s m...
Resolved! Manually recreating Tunnels\Cryptomaps
I tried to migrate using the Firewall Migration Tool the settings from ASA 5505 into FMC and it worked great for NAT, ACL, Route, Objects but unfortunately failed on the Site-to-site and vendor tunnel groups and outside crypto maps. Has anyone any e...
Hi Cisco ASA syslog message 302013 (ASA-6-302013: Built inbound TCP connection) does it really means a established TCP connection (after 3 way handshake) or does it mean that just the SYN packet is allowed through the firewall? Regards, Aneesh Kaimal
My company is thinking of getting Tanium as a one stop all in one solution for our needs.It seems to be more for system such as "unix/redhat/windows" but I am wondering if it has any functions for networking components. ? They also claim that there i...
Question 1: If "show asp-drop" has any entry, that is considered to be a dropped packet right?Question 2: Is there a way for me to troubleshoot the above capture to figure this out? This information is not showing up in other logging. The traffic ju...
