I have a s2s tunnel setup between 2x ASA's.It works fine and I can ping fine between users A & B. (192.168.100.2 <-> 192.168.200.2)However, if I try to ping from the Inside int, to the user on the other side, so same subnet, it gets blocked.ASA A Ins...
Hi,Beware to upgrade to Windows 2025 active directory if you have integrated your firewall management center. The Kerberos timestamp format bug reported with Cisco ISE also applies to FMC 7.4.2.1. https://bst.cisco.com/quickview/bug/CSCwn62873The onl...
Hi AllI have recently deployed a Firepower appliance using cdFMC, we have moved away from our old ASA.Part of this was to allow remote access VPN, I set up a realm which was for a domain, our domain has child domains and as such on the ASA we use to ...
Hello everyone,Happy Sunday to all! I am currently working on a production environment with dual ISPs, and I'm encountering some challenges with my configuration. I hope to get some guidance from the community.Network Setup:ISP 1: Interface 1/1 with ...
Hello So I know generally speaking it is overkill especially in home use but aside from wanting to have fun and the learning experience, I wonder if it is actually slowly things down and really too costly of overhead for a 40/5 MBps DSL. My setup is ...
In a configuration deployment, the 4125 device in transparent mode interrupts traffic.
Hello dear engineers, I would appreciate your guidance. I have multiple Firepower devices in FMC, and I want one of the Firepower devices to be visible only to a specific user. In other words, when the user logs in to FMC, only the specific Firepower...
Dear expertsWhen I tried to launch ASDM from web-browser, the "install ASDM launcher" windows always stays there and no prompt pops up like this:The ASA configuration is :Cisco Adaptive Security Appliance Software Version 9.19(1) SSP Operating System...
I tested today the establishment of a Route Based IPsec VPN between the ASA and the FTD.Everything works fine however I was surprised that on the ASA I didn't have to add a single ACL.I wonder if traffic destined to the tunnel is treated like traffic...
Hi AllI am hoping someone can help me.I need to ensure I have logs from my FTD firewalls in my cloud delivered firewall management centre (Cisco SCC)I am told we need the security analytics and logging licence, SAL.When I go to event logging, I can s...
Hello, everyone. A lot of resources say that firewalls can read more than just the traditional L3/L4 headers. They mention that they can read the L7 data and the payload itself. My question is, how exactly is this accomplished if the protocol that's ...
Hi All,I'm currently setting up a pair of 4225 FTDs in active/standby HA using a port-channel interface as the failover/state link (Po48 with member ports Eth1/7 and Eth1/8). The FTDs are running version 7.4.2.1. HA establishes ok and failover works ...
Hello folks,I want to migrate my edge firewall from the Cisco to the fortigate and i want to apply the following:-Allowing the users and denying them in global ACP base on user in user section in ACP.-Applying Malware and intrusion (NGFW features) po...
Hello,We have Firepower 4120 chassis with ASA imageCisco Adaptive Security Appliance Software Version 9.18(4)40 SSP Operating System Version 2.12(1.72)Device Manager Version 7.20(1) Compiled on Tue 27-Aug-24 07:55 GMT by buildersSystem image file is ...
Hello two cisco asa (FTD 2130 in appliance mode) work in failover pair I tried to add a new smtp traffic inspection policy via ssh console policy-map type inspect esmtp quik_no_ehlo_maskdescription do not mask ehlo for quik serversparametersmask-bann...
