I'm trying to copy a set of DAP policies from one ASA to another. When I tried to upload the dap.xml file, the ASDM rejected it saying it was a special system file. When I try to manually reconstruct the rules, nothing shows up for LDAP groups. Just ...
HiDo you ever come across a product you really don't like from the off? FTD is it for me. For years we do "show ip int brief" Whoever is in charge of FTD decides it's "show interface ip brief"Anyway, I have deployed a FTDv in an ESXi environment a...
inside 192.168.1.1/24------FTD-----Outside -71.x.x.2/24 ------71.x.x.1 (Gw)Mail - 192.168.1.2 -----------------71.x.x.3/24(Public)ns2 - 192.168.1.3 -----------------71.x.x.4/24(Public)www - 192.168.1.4 -----------------71.x.x.5/24(Public)I m having c...
Hi, I'm getting invalid credentials error while trying to connect integrate the FMC with my AD for external authentication. The exact error is:Opening connection to LDAP server - 10.20.20.10:389 - cn=user,dc=domain,dc=localCurrent TLS Require Cert: 0...
Hi all I m having strange issues with my FTD. I am managing it from FDM as I don't have FMC. I am Seeing strange behavior. I have deleted all the rules NAT and ACP . But my Clients Still getting internet. This is what I get from the command line. Th...
Hello all,We have a FTD A/P pair registered after purchase. They are working well until last month. They have lost the licenses without reason and became unregistered.This is the first time I met after more than ten years pratices on Cisco devices.I'...
I have 2 ASA-5508's in an Active/Passive configuration. My question is that I have a new 2Gbps internet circuit. Can I use port-channels to get more throughput? I have a Cisco switch with some mGig ports, so I was thinking I can terminate the circuit...
Hello all,There are two L2L vpns to 2 different partners configured on the same Cisco ISR4331 router. Now, beside the other traffic (to the lan of ISR4331), the 2 partners needs to communicate to each other like PartnerA -L2L-> ISR4331 -L2L-> Partne...
Hello everybody, our customer has a Firepower 1010 running OS rel. 6.6.5.1and is working with the FDM. I have configured a further S2S-tunnel and thereafter I had todeploy the new configuration. As the deployment did not work I checked the deployment...
Dear community, I have been checking the ASA 5506-X documentation and Ether-channel features but I could not find such information. So I came here to ask if somebody knows: Does Cisco ASA 5506-X support Hot Standby Ether-Channel link? Looking forwa...
Hello, I have a new FMC on VMware which has the required resources. I am not able to login to the gui. It keeps showing the "System processes are starting, please wait."I am able to access cliI see the below: root@vm4110:/Volume/home/admin# pmtool ...
I recently started a new job and inherited a Cisco firewall that seems to have been neglected a bit. I don't have experience with Cisco firewalls and am trying to figure out my upgrade path. It's a Cisco ASA 5255 with ASA version 9.12(4)7 and ASDM ve...
I am currently having issues establishing an S2S VPN Tunnel between to end devices in my Lab environment. (Cisco FTD to Cisco IOS). Currently, the IKEv2 SA Status says: IN-NEG : Please See Configurations Below:Network Topology: Cisco FTD (FMC Screen...
In regards to IPSEC tunnels, is it best to match PFS groups on the peer devices?
Hi,I want to know if cisco asa 5516-X version 9.x support for IPsec encryption with AES-GCM and IPsec integrity with SHA-256, SHA-384 or SHA-512 for S2S VPN with Azure.
