Hello I am trying to NAT Host 1 192.168.1.1 to WAN-1 (195.145.1.1) and NAT the Host 2 192.168.2.1 to WAN-2 (186.145.1.1), but when i try to config the PAT NAT for host 2 the nat only works when the WAN-1 interface are disabled . any ideas how to fi...
Forum Posts
VPN/BGP session down log as well on show tech and facing high latency on the network. I have attached logs, please suggest what will be the issue.
# Issue: We have configured a user named HUadmin for the export of data from the FMC to Cyber Observer application.But we are getting below failed export data log, kindly assist us to fix this issue. # Asset Details as below:Product ModelCisco Firepo...
How do I configure an IOS-XE switch for SpannedEt andhernet for FXOS 2.10 and FTD 7.0? My CCL interface on the 4115 appliance remains failed and down. The 4115 has an amber light for the assigned CCL. The Portchannel 48 with a member interface eth1...
Hi!I have configured a 1110 before but it a much much lesser scale but that setup dont work here. Therefore my kinda noob post. I got 7 vm servers on a esxi but i want them on each VLAN. I am connecting the esxi server to the FW with 1 connection/eth...
I am looking to buy a second-hand ASA 5508-x (For a Lab) and it comes with the ASA5508-CTRL-LIC license, will this license provide the Control and Protect part for the Firepower?
Resolved! Upgrading 4120 FXOS
Hi,We currently have a pair of Cisco 4120 Chassis each running a couple of virtual FTDs and are planning on upgrading the FXOS firmware and FTDs (FMC is already at latest version). My question is regarding the FTD devices. When the Chassis FXOS is be...
Last month we had to update our FMC to VDB to 350 and 351, My question is could i have gone straight to 351 without going to 350 and then 351? My question is, if we were in a position where we were 2 VDB updates behind, could we just update to the la...
Hello,I have taken over the job of managing the Cisco Firewall at a company. It seems that the last person has not been updating the firewall correctly.Under 'Security Intelligence' I am receiving a 'Cisco Intelligence Feed' and 'Cisco-Dns-and-Url-In...
I am currently performing security audits on equipment, but I am unable to find any documentation about hmac-sha2. I am trying to determine which platforms support the following command:ip ssh server algorithm mac hmac-sha2-512 hmac-sha2-256 Currentl...
Do any of these topics sound familiar to you?FTD Upgrade failed, and I can't do anything on the firewall because there's a "staged" deployment that fails but Discard All won't clear it (such as VRT or VDB updates).For some reason, any attempt to Depl...
According to this document regarding Clustering: Deploying a Cluster for Firepower Threat Defense on the Firepower 4100/9300 - CiscoDeploying a Cluster for Firepower Threat Defense on the Firepower 4100/9300 - CiscoWhen you deploy a cluster on the Fi...
We have an ASA 5515-X running 9.2(4) firmware with AnyConnect users and site-to-site vpns configured. All works fine (including hairpinning to the site-to-site connections), but I have been asked to change the config so that AnyC users can access a ...
Hello World,I have to add 1800+ IPs to block on ASA 5516x and I was wondering if there is a fundamental difference between creating each 'object network <name>' and adding them to a group, vs creating the 'object-network Blacklist' group and then add...
Hello! Problem:When connecting users via VPN and using the ISE as a radius server, DACLs are applied.This generates a message to the ASA which is sent to the syslog server:%ASA-5-111008: User 'aaa-acl' executed the 'access-list #ACSACL#***' command. ...
