Resolved! Max CRL Size on Cisco ASA
Hi,Have CRL file on Cisco ASA a maximum dimension in order to cache it? For example, on Cisco VPN Concentrator 3080 the maxuimum dimension is 1 MB.Thank you.Best regards.Massimiliano.
Forum Posts
Resolved! arp inspection burst interval
Hi every one I'm fine tuning the limit rate on arp inspection, but I itch in my head over the correct understanding of arp inspection burst interval. In fact, another person has asked the very same question https://www.mail-archive.com/ccie_security@...
I have ASA 5506 version 9.8(2) in my office which connected to two (2) ISPs. I had implemented PBR to split our LAN subnet JTP and WIFI_JTP to respective route map. Subnet JTP which comes from wired vlan route-map to ISP 2 MYNET static ip and subnet ...
Resolved! Firepower Geoblocking Bypass
Dear Community, We are currently using the Geolocation Blocking feature in our ACP's, blocking traffic to/from some specific countries. However, we have run into the occasional instance where we need to whitelist a single IP that resides in a specifi...
Hello. I have a customer who has been complaining of slow internet. I have verified packet loss pinging out to the internet on a users machine. A packet capture also shows a fair amount of TCP retransmissions and Out of order packets. Upon further in...
Hello everybody,our customer has a Firepower 2110 Appliance that is runningASA OS 9.10(1)44.Our monitoring throught an alarm because missing NTP synchronisation.When I go to the chassis manager I entered the folloing commandsto check this: firepower-...
Resolved! Cisco ASDM not working but can SSH
Think ASA and ASDM are compatible. Have setup capture and can see the traffic on https but asdm not working. show capturecapture capin type raw-data interface Outside interface management [Capturing - 738 bytes]match tcp host 10.10.205.183 host 10.40...
Trying to Find UUID
I'm exploring VXLANs for the first time and have found out that my ASA5555-X firewalls do support it. They're running 9.8(3) code.My use case is better explained using diagrams. The first one is how things look now:Today, the servers are in different...
Hello Everyone, I just changed my router on service provider end, and now the user is not getting stable connection from the server. Usually the ping takes 60 ms from server to the end user, now when I changed the router it is taking around >400ms of...
I am upgrading a FPR 2130 current version 6.4.0.9 from the FMC gui using cisco FTD SSP FP2k 6.6.5-81.tar. The push is successful the however the upgrade fails. Now information about failure is generated anywhere .I download the troubleshoot file but ...
Hello Team, i am having issue with my Cisco ASA firewall in FTD 4100 running in Multicontext mode. Both primary and secondary firewall is having some different configuration wherease Primary firewall is having correct configuration. In order to mitig...
Resolved! ASDM-IDM Launcher Password Issue
Hello All,Recently I have determined that one of my neighbors teenagers has decided to refine his hacking skills on my home network. So I thought it might be a good time to make an investment into a Cisco ASA 5505 Appliance.Here is my issue, when I e...
I am running "disk0:/asa951-lfbff-k8.SPA" with ASDM /asdm-762-150.bin I need to enable SAML authentication on Anyconnect VPN. Can you please suggest which version I need to upgrade to support SAML feature?
Resolved! ASA port translation (PAT) Issue
Hi,I have a strange issue with PAT in Cisco ASA 5540 running Version 8.0(5).We have a web server (172.16.20.8) which is in DMZ listening port 90. If anyone access from outside to the website on port 80 the ASA should translate the port on 90. So I ex...
