Hello, we are testing SAML authentication and we can't get certificate authentication to work.Currently, we are using AAA + Certificate authentication. we are on version 9.17(1) with an Anyconnect client on version 4.10.0208 There is an incompatibi...
Forum Posts
So there were 2 Cisco ASA 5000 series boxes and their failover lan and state interfaces were connected via 2 C9300 switches. FW1>>FailoverLAN>>>>>SW1>>>>>Po1<<<<<<<<<<SW2<<<<<<FailoverLAN<<FW2FW1>>FailoverState>>>>>SW1>>>>>Po1<<<<<<<<<<SW2<<<<<<Fail...
The reachability of each interface can be done from either leg, still my asa failover is in failed state. Below is the show failover result from secondary leg (acting as active box)Failover OnFailover unit SecondaryFailover LAN Interface: failoverlan...
Hi All, Do you know if there is a way to redistribute EIGRP into BGP in Firepower FTD?I configured EIGRP, BGP and redist BGP into EIGRP.But couldn't find a way to redist EIGRP into BGP. Regards, Umut Yasar
Hi sir I use an IP 134.251.87.253 134.251.87.254 as a server IPs behind the firewall ASA.Both servers' gateway IP is 134.251.87.237, which is a port IP on the ASA. I can ping 134.251.87.253 134.251.87.254 from the ASA.But from other subnets, I can o...
Hello, I have an ASA5506-X that is currently loaded with a Firepower. I would like to have only one ASA running on it and would like to upload the IMAGE to it. unfortunately no command works for me, because always error messages are displayed.If I wa...
Dear community, Am facing an issue were a user is in the Domain Users group, a group were i stopped YouTube and media streaming, but I found a User to be able to access and use YouTube. Checked the user and is in the same group as the other Domain ...
Hello,I use FMC 7.0.1 and I want to have SSL policy with source country.I am trying to decrypt port 443. But SSL policy with source country doesn't work and traffic matches with SSL default policy.When I change same rule source with IP address it wor...
Hi All, Is there a way where we can allow traffic from outside interface with security-level 0 to Inside or DMZ interface with higher security-level apart from ACLs ? I mean without any acl entry can we allow traffic?Is there any other way traffic ...
ASA 5506-X Very basic initial config.Purpose is to firewall my server lab from my HOME-NET and the Internet. ASA is on my HOME-NET 192.168.82.0.PC is 192.168.82.99.ASA HOME-NET (outside) interface is 192.168.82.100. I am able to ASDM to the ASA on 19...
i 'Im currently setting up a anyconnect vpn using multi certificate, and finding that the CRL or OCSP is not working. Im using a yubikey with the personal certificate on it and a device certificate form a laptop, both of these are signed by our own ...
Hi I am a bit confused here on the topic of IRB. According to the documentation on the Cisco FTD, is "redundant interface" a feature of IRB or "EtherChannel interface" ? Furthermore, is IRB is only acheivable in routed mode? https://www.cisco.com/c...
Hello. installation of firepower pkg hangs. And fp module ib recovery statesw-module module sfr recover configure image disk0:/asasfr-5500x-boot-7.0.0-94.imgsetupsystem install noconfirm http://192.168.0.85/asasfr-sys-7.0.0-94.pkg last messages from ...
We are converting an active/standby ASA pair to FTD. We decommissioned the old standby and set it up as the new FTD primary, managed through FMC. Once we tested that for a while, we have wiped the old ASA primary and have installed the same version o...
Resolved! Wi-fi clients not seen in FMC
When looking at traffic in the FMC I've noticed that I never see wi-fi clients listed. I will see an entry for the AP's IP address, but not the actual client. We have Meraki AP's, ASA with firepower module managed by FMC Any help would be appreciated...
