Hello,so I got free of charge cisco 4331I configured for internet access from my LANbut I'm facing difficulty whit ZBF I cannot find a way to secure my LAN from outsideIf I run port scan whit nmap on my wan IP all ports are showing up closed and not ...
Forum Posts
Hello, Everyone. I want to create Internal CA for SSL Decryption. And I generate a CSR, then I request a certificate on Third Party CA. After that I downloaded the Certificate and will install it on Iinternal CA. But, when I want to upload a signed C...
Hello,I am trying to setup a FMC 1600 appliance and have been told it's connected to it's serial port via a serial console server.However, when I log into the cli, I get the following prompt: FMC cli->I cannot type anything in there (I've tried ?, he...
Hi, I am trying to install ASAv on my Vcenter server. OVF Template is deployed successfully but when i start the ASAv VM it goes through the Initial checks and then keeps on rebooting. I have tried 9.6, 9.5 and 9.4 but same behaviour. I have attached...
If official devices are registered thru MAC & IP to access the LAN. How can we deal with MAC & IP spoofing. Anyone can bring its home laptop or mobile and put the allowed MAC or IP on his home device to access the secure network. How can we deal with...
I need to renew our Portal Certificate on ISE 2.6. I have begun the process of filling out the signing request and selected Portal for the certificates use. My question is about the Portal Group Tag. The current cert is using the " Default Portal ...
Hello!Cisco Adaptive Security Appliance (ASAI'm a newbie in Cisco's PT. I'm trying to configure and enable the firewall in a wireless router's GUI, but for some Cisco Adaptive Security Appliance (ASA)reason, the SPI Firewall Protection buttons are no...
Resolved! FTD 1000 vs 2100 TLS performance
I was browsing Cisco's web site looking specifically for SSL/TLS decryption specs for 1000 and 2100 FTD devices when I ran into something I did not expect. According to the site (see attached files) the 2100 family has better specs pretty much acros...
Hi Guys, I configured some users in my ASA FW but I have an issue with the password which is still shown in plain text with a "sh run" command. Do you have any idea how to fix this please? This is the line command used: username admin password "real ...
Resolved! Cisco 5585x Licensing
I have a ASA 5585x with SSP 40. Since it has an SSP 40 should the 10GE I/O perpetual? Is it going to expire? ciscoasa# ciscoasa# sh ver Cisco Adaptive Security Appliance Software Version 9.2(3) Device Manager Version 7.1(1)52 Compiled on Mon 15-Dec-1...
I have a mandatory rule to allow the Facebook application. However, I'm finding that often times this rule is permitting Facebook and anything else under the Sun. Exactly how do I narrow it down so that the rule is for Facebook and not just any rand...
Hi,I have ASA 5506-X every time I reboot the firewall or power goes out I have to re-upload the image through TFTP. It wont save the configuration. After reloading the configuration and trying to WR I get below: please help!! ciscoasa(config)# wrBuil...
We have several ASA 5508's sitting in boxes for a couple years for a project that never started. We're repurposing them, but out of the box they are running 6.2.3. We've tried to 5 of them to 6.6.5, 6.5.0, and even 6.4.0. One went without a hitch to ...
I am trying to upgrade from version 6.4 til 6.6.5 and the upgrade failes due low disk space on FTD. I have deleted old updates files , temp files manually. But i cannot free up additional disk space. /ngfwSize: 51GFree: 13GUsed: 38GPercent: 75% Err...
Hello, are there any hidden (default) NAT rules on an ASA 5506-X with software 9.14?I didn't configure any NAT rules but any device on the inside net can access the outside network. packet trace says:Phase: 1 Type: ACCESS-LIST Subtype: Result: ALLOW ...
