It appears this particular firewall is not acknowledging the last rule prior to default action. Its the only firewall in our fleet ignoring that rule. I test all other firewalls and confirmed they are matching. I made sure the zones are applied to in...
I have an FTD 1010 with only a base license and a requirement to use this as a simple Internet router/gateway. I have a dynamic NAT rule using interface PAT and one access rule that trusts outgoing traffic. If I set the default action to block I ca...
HelloI would like some guidance on my new Firepower 2110. This is out of the box.I would like to run ASA on this device as platform mode and upgrade it using. The Firewall currently has the default software 6.2 installed. I tried uploading a package ...
I am banging my head here trying to figure out why I can't get Exchange email to flow. I have this same setup at a different site with no issues. I have the settings mirrored to this new site and Exchange email will just not flow. I currently have ...
I have a stand alone FTD that is remote with its only connection to the DC is via Site to Site VPN on the "outside" interface. I read where the version we are running supports using the data port as the management port, but I can not find any detail ...
dear Gentscould you please support I am using ASDM for ASA and I have privileges' 15 but once I access ASDM I can't see any tab for remote VPN or even I can't see it in VPN wizard I try to check in options but nothing , kinky refer to image in attac...
Hi all, I have run in to a weird issue with the FPR1010. When connecting a client machine to the inside network, I can browse some but not all web sites. The particular problem is my 'test' site of www.bbc.co.uk. However, rather unbelievably, it will...
Hi Accessing to a router (7200/ios15/192.168.1.16) from Ubuntu via ssh failed as below. It looks like there is no matching cipher. After several tries changing different cipher as below, ssh still cannot access the router. Anyone can share some solut...
Hallo , I am tracing from outside to inside with the following config but am not able to trace it from outside, but it is working from inside-Outside. class-map inspection_defaultmatch default-inspection-trafficclass-map TRACE-Cmatch port udp rang...
hi,i got a pair of ASA active-standby pair which failover didn't work or kick in over the holidays.the traffic was restored when manually forced a failover to secondary FW.failover link is via port-channel 1 and "data" ports are in a port-channel 15....
Hi, I have a device in my DMZ that needs to talk to my inside network server. I can't telnet using the ports that I have listed in my access list. Packet tracer shows that the TCP traffic is not blocked from the inside to the DMZ1. packet-tracer inp...
Hi We can define ssh version 2 at router or switch with command ip ssh version 2. but we also can see Openssh 7 that people talk about. Is there any relation between ip ssh version 2 and Openssh 7? Thank you!
interface outside: Static PAT, Static NATnat (any,outside) source static NAT-Private NAT-Publicobject network PAT-Privatenat (inside,outside) static interfaceinterface inside: with Dynamic PATobject network INSIDE-NETnat (inside,outside) dynamic inte...
I'm working with Ansible 2.9 and when I try to run Ad-Hoc commands or plays I get errors stating my ssh ansible -m ios_ping -a "dest=10.88.2.21" testboxesSSH password:ys2021_b2046r301_test.srf.local | FAILED! => {"changed": false,"msg": "Connection t...
Has anyone encountered an issue editing the Split-Tunnel ACL object after upgrading Azure Virtual FMC to 7.1? When I try to add a subnet to an exiting rule I get the following error when trying to save: "Index 0 out of bounds for length 0"
