I have 2 outside connections to my 2130 and some static routing to point certain things in certain directions. My secondary outbound interface has all of my site to site tunnels on it. I have tried to move one device's tunnel to the primary outboun...
Forum Posts
Hello,I am new to security track, i have been asked to setup lab and allow users from inside firewall to access internet. here is my lab setup PC -> switch 1 (layer2) -> (inside) ASA (outside) -> switch 2 (Layer2) -> Router does switch 2 port needs i...
hi, i tried to google but can only see how to kill or clear SSH or telnet session to an ASA. could someone tell me how to kill the console session? we got a OOB server that console to the ASA and got locked when i applied the AAA when via another SSH...
Hi, I have a pair ASA 5525-X with firepower services module in Active / Standby HA. Recently we found that the primary ASA randomly fails over to the secondary unit and shows the error "Module sfr , Application down "ASA Firepower version 6.2.0.2-5...
We have 2 ISP BGP peers (1.1.1.1, AS111; 2.2.2.2, AS222), ASA 5515-X (9.12.4.18), own public network (192.0.2.0/24, AS333).We need to have SSL VPN (and s2s too) be configured on this device, but on our IP-addresses, not ISP. Config be like:router bgp...
Resolved! ASA5525: Separate NAT for TCP and UDP?
When creating a NAT object, advanced settings asks you to specify TCP or UDP protocol. Does that mean you should create one NAT with private/public pair for UDP and one for TCP?
Hi All, We have some N3ks - on which we apply ACLs on a VLAN interface - and for the most part this works well. except: Sometimes (for a few hours, every few days) the http/s traffic is blocked. If we add a permit tcp any any rule to the beginning of...
We have an internal initiative to get external BGP up and running; however, we won't have the routers available until next FY. We're looking at using the FTDs to get a summary route from the peers, but I have some concerns. We recently tried to confi...
Hi volks, did someone used the 2 PoE-Ports at the Firepower 1010 with FTD 6.6 and FDM? I tryed to connect an AP1815I to Eth1/7. The AP gets stuck in a reboot cycle because he didnt get enough power via PoE (blinking amber-red-green then turning off)....
Resolved! I need update my ASA 5510
Hi. I need update ASA5510s' software.who can advice me which IOS version best suit for my ASA.Charakteristics:Cisco Adaptive Security Appliance Software Version 8.0(4)Device Manager Version 7.6(1)ardware: ASA5510, 256 MB RAM, CPU Pentium 4 Celeron 16...
Resolved! FMC 2500 Upgrade Questions
Dear Community,I want to upgrade my Physical FMC2500 appliances that are in an Active/Standby HA pair from 6.4.0.9 to 6.7.0.2 but had some questions regarding the process. Please let me know if this process seems correct:- Perform a Backup of the FMC...
Hi, I have a cluster of FP 2130 that are migrating into FMC.However I would like to know if there is a way to keep a local gui access into the machine via a dedicated interface for example. Thanks.
Resolved! LDAP Cisco ASA Remote Access VPN
Hello! I have a problem with setting up cisco asa. Cisco Adaptive Security Appliance Software Version 9.16(2)13SSP Operating System Version 2.10(1.180)Device Manager Version 7.16(1)I am setup VPN server for users, with AAA with LDAP (freeIPA) server...
Hi! I am having trouble with an ASA5512. It does not start the http server anymore. It used to work fine, asdm and all. We have not upgraded the router or changed its licensing. The reason is pretty clear - there is no ssl socket listening. The goog...
Network diagram is above, Firewall is configured to give internet access to few clients and site to site VPN to few outside entities. My organization recently acquired a web application and they give IP: 192.168.200.98 and Gateway: 192.168.200.97 and...
