We have 2 ISP BGP peers (1.1.1.1, AS111; 2.2.2.2, AS222), ASA 5515-X (9.12.4.18), own public network (192.0.2.0/24, AS333).We need to have SSL VPN (and s2s too) be configured on this device, but on our IP-addresses, not ISP. Config be like:router bgp...
Forum Posts
Resolved! ASA5525: Separate NAT for TCP and UDP?
When creating a NAT object, advanced settings asks you to specify TCP or UDP protocol. Does that mean you should create one NAT with private/public pair for UDP and one for TCP?
Hi All, We have some N3ks - on which we apply ACLs on a VLAN interface - and for the most part this works well. except: Sometimes (for a few hours, every few days) the http/s traffic is blocked. If we add a permit tcp any any rule to the beginning of...
We have an internal initiative to get external BGP up and running; however, we won't have the routers available until next FY. We're looking at using the FTDs to get a summary route from the peers, but I have some concerns. We recently tried to confi...
Hi volks, did someone used the 2 PoE-Ports at the Firepower 1010 with FTD 6.6 and FDM? I tryed to connect an AP1815I to Eth1/7. The AP gets stuck in a reboot cycle because he didnt get enough power via PoE (blinking amber-red-green then turning off)....
Resolved! I need update my ASA 5510
Hi. I need update ASA5510s' software.who can advice me which IOS version best suit for my ASA.Charakteristics:Cisco Adaptive Security Appliance Software Version 8.0(4)Device Manager Version 7.6(1)ardware: ASA5510, 256 MB RAM, CPU Pentium 4 Celeron 16...
Resolved! FMC 2500 Upgrade Questions
Dear Community,I want to upgrade my Physical FMC2500 appliances that are in an Active/Standby HA pair from 6.4.0.9 to 6.7.0.2 but had some questions regarding the process. Please let me know if this process seems correct:- Perform a Backup of the FMC...
Hi, I have a cluster of FP 2130 that are migrating into FMC.However I would like to know if there is a way to keep a local gui access into the machine via a dedicated interface for example. Thanks.
Resolved! LDAP Cisco ASA Remote Access VPN
Hello! I have a problem with setting up cisco asa. Cisco Adaptive Security Appliance Software Version 9.16(2)13SSP Operating System Version 2.10(1.180)Device Manager Version 7.16(1)I am setup VPN server for users, with AAA with LDAP (freeIPA) server...
Hi! I am having trouble with an ASA5512. It does not start the http server anymore. It used to work fine, asdm and all. We have not upgraded the router or changed its licensing. The reason is pretty clear - there is no ssl socket listening. The goog...
Network diagram is above, Firewall is configured to give internet access to few clients and site to site VPN to few outside entities. My organization recently acquired a web application and they give IP: 192.168.200.98 and Gateway: 192.168.200.97 and...
Resolved! Stealthwatch
Hallo,i have cisco stealthwatch SMC VE and Flow Controller VE, when i download the pathes and updates for Flow Controller, i have always tow files ( Flow Controller Netflow and Flow Controller sFlow).Which one should i add them so i can update the Fl...
Hi,I have to migrate my ASA with firepower to firepower 1120. Hi have aquestion:is it possibile to configure my FTD 1120 connecting it to FMC only using management port? (i'd like to configure it without overlapping with the existsting ASAs anche the...
Resolved! Firepower Network Module installation
Community,We purchased a pair of FPR2K-NM-8X10G for our 2140s and a pair of FPR4K-NM-8X10G for our 4140's respectively. I am reading that these modules are hot swappable but wanted to reach out to see if anyone had any experience installing these in ...
Hallo, i have now Cisco Stealthwatc SMC version 7.3.1 and Flow Controller Version 7.3.1, and i want to update the Frimware of them both. Can i update them directly to 7.4.0?Or i muss follow this Path : 7.3.1 -> 7.3.2 -> 7.4.0 ???? Another thing, tha...
