Hi All, I would like to know ASA can configure aaa-server group for backup if aaa-server primary down ? as configuration below. If Radius-1 group fail can i configure automatic to switchover to Raidius-2 group.?aaa-server Radius-1 protocol radiusaaa-...
Hi all, Currently using an ASA pair for internet connectivity. I have 2 point to point circuits into 2 different ISP's. I have each configured on separate interfaces on the ASA. Which creates my first problem that I have multiple outside interfaces. ...
On my ASA I have a network interface on a production VLAN, and that network interface has an ACL where the only rules is a "access-list ... permit ip any any" (because of how was implemented in the past).Now, for some sort of compliance, I have to re...
Hi, I have developed a Python script that uses a textfile (IP addresses 2,500+) to create network objects and add those objects to a network object group. When I use the script it is very slow, takes several seconds for an object te be created and ad...
Hello,i would like to ask you regarding extend support for Cisco ASA 5585 x SSP 10,As you aware of that Cisco SAS 5585 x SSP 10 is going to end of support by June 2022.i would like to understand is there a way to extend the Cisco ASA 5585 x SSP 10 li...
Hi team, Greetings, Is there any limit for the Backup feature on FMC ?for example, FMC limit the Auto-Backup (Recurring Backup) with only 10 Files (Considering by weekly auto-backup, which is 10 weeks), if more than 10 files backup, the oldest of bac...
Hello, I'm trying to configure a new Firepower 1010 as VPN Gateway with AnyConnect. The FPR-1010 is running with ASA 9.13(1) and has been successfully registered with Smart Account:asa-test01(config)# show version Cisco Adaptive Security Appliance So...
Hello Dears I had evaluation licensee for FTD physical box 2100 I am managing it through FDM not FMC, and I had enable the routing (static route) but still can not ping from inside users to any of external hosts and when try to ping I got general f...
Hey guys, I had this error in my cluster FTD-2130 since a couple of days .. Please Help !
Hi, I want to check if we are hitting this bug:https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvz46333 But how can I get the FMC logs or the FTD logs?
Dear community, I want to upgrade Snort 2 to Snort 3 in a HA FTD setup. Can someone tell me the process without causing downtime? Second use case is, Upgrade of Snort in a Active/Active Setup also? Any information would highly be appreciated. Tha...
Hi,I am trying to use 1:1 Static NAT on NAT enabled device.There is a firewall behind the NAT enabled device, which will have IPSec setup.Do I need to set up NAT-T(Traversal) on the firewall in this case using 1:1 Static NAT??As far as I understand, ...
Hi guys im trying to update my ASA 5508-X to the version 7.0.0 as i need to update this so they can work the site to site vpn with a Firepower 1010 however is not able to do the update im using the system upgrade procedure and i already upgrade the ...
I have setup a site to site vpn up between a Cisco ASA 5508-x and a Cisco ISR 4531. The tunnel is showing up but I cannont ping between the tunnels. When I ping it goes out one hop and then I get the !N. here is some show commands from the ASA and R...
I'm trying to setup an etherchannel on my ASA instance (version 9.17.1) that is running on a Firepower 4112 (version 2.11(1.154). I've managed to create the etherchannel via FCM and this is being presented to the ASA okay, but I have no options to pe...
