Hi all, I have enabled security license on an ISR 4400 in evaluation mode. But there is no any data with TLS. Is TLS still available in evaluation mode? BTW, the isr is registered under our smart licensing portal. Thanks.
Forum Posts
Hello All, We have a FTD 2100 HA pair managed trough FMC. According to Cisco documentation upgrading a HA pair trough FMC will go automaticly ( standby first, then active).Is there a possibility to upgrade this manualy? ( so first standby, manual fai...
Resolved! Cisco FTD HA License
Hello , i have a question about implement 2 Cisco FTD 2110 on HA fail over mode, my question about the license, in case i purchase the license in our case TMC for one device only and the standby device has only the base license, it is possible in thi...
Hello There I was wondering if somebody is able to explain me (or send the link) why I can't make my Firepower 2140 log Policies events to my Syslog Server. Ive defined a syslog destination under Platform settings and I also define under the Access C...
We are increasingly seeing requests where an employee is working with a client who wants them to connect with them using remote-access VPN to access resources relevant to their active projects. Are there any suggestions or best practice guidelines w...
USER with ip address 192.168.2.2 wants to reach the on-premise SDC server througth its public ip addreess 209.165.202.130 (this server is reacheable throught its private IP 192.168.1.3 but the user wants to reach the public ip from the LAN instead of...
The IOS version for the ASA5505 is 3 years old. 9.1.7. Are they hiding newer versions somewhere?
Hello!I have ASA with FirePOWER (no AMP and URL). And have many (over 10) zones.yesterday my SIP server sometimes loss registration and vice also have poor quality.I try to PING 8.8.8.8 and get floating delay from 25 to 500! ms.i exclude sip server ...
Dear all, As I'm experiencing some CPU-hog on a cluster of ASA5510 (Active/Standby scheme), to fix the problem it is recommended to upgrade the IOS. Both firewall are running on ISO 8.4.(4) - have 1024 MB RAM - and use ASDM 6.4(I know the device and ...
Hello all, I'm trying to get our Firepower suite scanned using Tenable SC and have been successful in getting the hosts scanned. The next step is to scan the FMC appliance. We are using the FMC 6.4 virtual appliance hosted on VMware and the CLI is ...
Hello, I have two FRP 1010 in HA. There are 3 interfaces (inside, outside and DMZ)Each day I experience a "blackout" at the outside interface. The FWs outside interface are connected to a switch which gives internet access and two leased lines. The ...
Hello, I have forgotten the cli password on a FTD 1010.Is there a way to set it again without resetting the FTD? Thanks and regards, Konstantinos
Hey all,I am having an issue that I am a bit perplexed with. While I am not an expert in the firewall area, I have the task of creating some rules to lock down our lab firewall. Right now most all of our VLAN rules are "permit ip any any".Here is the...
Resolved! ASA5515 - deny ICMP dst outside
I get an error some in a while about Google DNS:%ASA-4-117145: Deny icmp src Z245:172.23.123.67 dst OUTSIDE:8.8.8.8 (type 3, code 3) by access-group "Z245_access_in" I'm trying to understand it, but my mind is frozen.I have to permit icmp for Z245_...
HiDoes anyone know if its possible that FTD might be adding latency to traffic? we have a site to site with a 3rd party where we nat our clients going to them (Dyanmic) and we have static nat for our servers where they keep their own address, what we...
