Hello everybody,our customer has a S2S VPN-Tunnel with his Firepower 1120 (7.0.0.1) and a remote Sophos XG.They can communicate through the tunnel but causes error message in the IKEv1 debug outputand the IPSec counters stays 0. The counters of other...
Forum Posts
Resolved! ASA Failover Port Connection
For the ASA5525X and ASA5515X, is it possible to support the copper based failover connection between two ASAs in Active/Standby failover without the heartbeat connection being direct, back-to-back copper, but instead connect through trunked switches...
We aren't able to use teamviewer to connect to remote users connected via cisco vpn client. Remote desktop works but would like to see the users desktop. Are there any ports that need to be opened in the vpn connection?
Hello, First if this is the wrong area I apologize, wasn't sure if it should go here or in the VPN section cause it kind of deals with both. I am trying to setup RA VPN on a FPR1010-NGFW. We have only one static IP for our WAN and our email ser...
I apologize ahead of time if this question has already been asked, but my organization is considering purchasing several Firepower appliances for our business. I'm trying to figure out what is included in regards to IPS/AV/Malware/etc protection the...
Resolved! LDAP AAA authentication for ssh
Hi,I want configure authentication in ssh on cisco asa with ldap integration based on a group active directory of admins.Ill'explain, I don't want that every user can login, but only the users in a specific active directory group.Is possible?I try to...
Hello Everyone,We are using a very old Cisco ASA 5520 8.2(3) - I know it is extremely outdated, we will be replacing it next year, but the problem we are facing is quite odd and I want to try to find the root cause of it. It has been working for many...
We are on Cisco ASA 5516. There is an interface 10.50.70.0/23 on the firewall and it has outbound access list set to 'permit any'. But there is no NAT configured for this interface. Yet, systems behind this interface are able to access internet, how ...
Resolved! FMC Security Intelligence Arrows/Numbers
Hello,I haven't been able to find any documentation online regarding this but what do the +/- , Up/Down and the + sign with green circle around it beside the categories actually mean (see screen shot)? Thx in advance for any help provided.
Hello All, I've been troubleshooting an issue with getting Single Signon to work with AnyConnect, using SAML and a hosted id provider. In the end, it appears to have been an issue with time sync. So I wanted to configure both our FMC and FTD to s...
I found that my mail server was classified as Bittorrent in the connection event.But the Port he uses is SMTP 25 port.
I thought I configured dynamic DNS update correctly but it still not working. My DNS server is an internal bind server and I configured the zones in question with allowed-update any. zone "5.50.10.in-addr.arpa" IN { type master; file "db.5.50.1...
Hello everyone As the title says, we have multiple FTDs managed by an FMC and when I try to generate a backup for them, this will remain stored locally inside the FTD. The remote storage seems to be configured properly as when I test it through the "...
Resolved! Max CRL Size on Cisco ASA
Hi,Have CRL file on Cisco ASA a maximum dimension in order to cache it? For example, on Cisco VPN Concentrator 3080 the maxuimum dimension is 1 MB.Thank you.Best regards.Massimiliano.
Resolved! arp inspection burst interval
Hi every one I'm fine tuning the limit rate on arp inspection, but I itch in my head over the correct understanding of arp inspection burst interval. In fact, another person has asked the very same question https://www.mail-archive.com/ccie_security@...
