With an existing FPR2110, using ASA mode, containing 1,500 SSL VPN licenses, now I want to enable a Layer 7 license TMC, would anyone please let me know whether it's needed to migrate FPR2110SSL VPN and how?
Forum Posts
Hello.My company is requesting to remove all native Java software from our PC's and servers.They have suggested a few alternatives to use. Wondering if anyone has used these and if they allow the CTC to work?= Adopt OpenJDK=Evergreen OpenJDK =Amazon ...
I have 4 sites that I need remote user anyconnect VPN configured within Firepower Management Center 6.6.5. Only one of these sites is Domain configured. I can setup anyconnect to use the Radius configured Network Policy Server however with the other ...
Resolved! Cisco ASA public servers vs object NAT
Hey all on ASA there is public servers option for like http server access to internal network to web server. I don't quite understand how it's different than doing an object NAT for the webserver host and then adding the out-In ACE for it? Side ques...
Resolved! ASA Public Server
Hey all on ASA there is public servers option for like http server access to internal network to web server. I don't quite understand how it's different than doing an object NAT for the webserver host and then adding the out-In ACE for it? Side ques...
Hi all,I am needing to open a few UDP ports to a host on the network. I have set the following config and I am unable to connect to the services running on these ports from the outside. Inside interfaces are running in a Bridge group. I am able to op...
Hi guys For a Pak enabled FMCv, does it suppose to be able to manage smart licensing FTD? Is there any different between the PAK enabled and smart licensing FMCv? Yuan
I am attempting to setup a ASA 5515-x for the first time on my own.I have followed what I can on default cmd setup for the MGMT port.interface Management0/0 management-only nameif management security-level 100 ip address 192.168.1.1 255.255.255.0 Wh...
Just trying to make sure as this will be me doing it for the first time.Scenario:Device: FPR 1120Interface Managment 1/1 : unassigned/shutASA cli accessible via data interface ip address. Problem Statement:FPR 1120 is running :Cisco Adaptive Security...
Layer3 etherchannel is not pinging each other, ports are up and in use status, everything looks good but switches are not pinging each other in eveng. Plz check the attached picture for the switch version. Plz let me know any remedy if any one knows ...
Hi, I have integrated FMC with ISE PIC and AD through Realm but looks passive authentication is not working as expected. So I can access URLs If I dont add user group in my ACP but I its not working if I add AD user group in my ACP. In terms of confi...
Is there a way to show which rule traffic hit when generate a report? What I'm after is to be able to filter logs based on a rule name/number. Thanks
Resolved! ASA Unique Identifier
Hi guys, This might sound like a silly question but I have my reasons. :c) Is there any unique identifier that can be polled through SNMP to identify one firewall to the next (both physical and virtual context) other than MAC address? Hostname spri...
I am trying to deploy an ASA at a remote location. I am doing it via webex, which is how I noticed this unusual behavior. When we move cables over to the ASA, the webex session continues to work for about a minute. However, no new sessions, like b...
Resolved! Cipher should be replaced at switch
Hi We got security vulnerability issue report. We are not sure which cipher should be replaced. http/https are disabled. Looks like ssh is related with the issue. Anyone can share some suggestions? Thank you The switch info: CAT3K_CAA-UNIVERSALK9-M, ...
