I have a pair of ASA-5585-X in an active-standby failover configuration. Currently they are running software version 8.4.3. I'm looking to upgrade to 9.1.1. From the release notes I understand that in order to perform a "zero downtime" upgrade I n...
HI all, I've migrated a few ASAs to FMC managed FTDs using Firepower Migration Tool, using both ver2.4 and ver2.4.1It's a handy tool so that we don't have to create objects and rules from scratch, but obviously not perfect.We have outbound rules whic...
Hello team We have few servers in DMZ that need to be accessed from public via http however we want to have HTTPS traffic between public clients and FTD and then between FTD and DMZ server it would be plain HTTP since server doesn't support HTTPS bec...
Dear membersI'm upgrading a pair of ASA5510 from 8.4.1 to 8.4.6 using the strategy of 0 downtime, upgrading the Stanby ASA first and switching it to active.After switch the ASA5510 version 8.4.6, the outside acl seems to stop working.I open the debug...
How to configure Dynamic DNS on cisco asa ASDM? I want to connect it with No-IP.com. My public IP 202.186.57.121.I've created a hostname for my connection, but I don't know how to verify if my configuration successful or not.
Hi All , I try to block and filter source ip for VPN tunnel (SSL/IPSEC) . I see some document recommend command "control-plan' in access-group command . But I try to use this command but not working . My LAB Topology for Test. Client ---------------...
I have FMC 6.6, FTD 6.5 and ISE 2.7. FMC is connected to ISE via pxGrid and I see the User-to-IP mapping in the FMC: Analysis > Users shows user jbeam with an IP of 192.168.131.11 and an active session count of 1. I have a single identity policy mapp...
Hi, I have an ASA 5585-x in a failover setup and I am looking at the interface counters. On one of the 1 gig interfaces the total transmitted bandwidth seems to be 390MB/s but how is that possible on a 1G interface? GigabitEthernet0/1: received (in 1...
Hello,Is there a way to Copy , Extract and export the Rule Set from a Policy. I am using FMC 4000 for reference.
Our external interface (1/1), is bouncing/disconnecting. How can I monitor the interface through the CLI to look for errors?I have run the "show interface g1/1 stats" (and other options), but I don't see CRC errors, or other errors.-newbiftd
This might be a simple question but one of our customers has an ASA 5508 with Firepower services, I've looked online and i can't quite make out when this version of hardware will stop getting software updates. EOS has already been announced.
Hii have ASA5555-X with firepower modulei use ASDM for manage ASA and use FMC(6.4.0.4) for manage FIREPOWER(use inline mode for asa traffic to firepower)i have a web server in DMZi config Decrypt-Known key method for outbound traffic that access to m...
Hello Everyone,I am new in using ASDM for Cisco ASA 5510.I want to block certian websites from my LAN.Can anyone tell me how to do that using ASDM ?Thank you...
Hi guysI just updated my FMC to version 6.6.0 and I see that support Time range for access control rule. But when I tried to apply it show error message: "Time range is not supported on one ore more of the targeted devices" FTD version 6.5.0FMC versi...
Hi,I am just wondering, do we need to allow in a firewall rule a DHCP traffic if my firewall is setup with DHCP Relay for my LAN?For example, LAN-10 <-----> Firewall <---DHCP Relay---> DHCP Server.In my understanding, no need since the firewall is th...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 09-22-2026 04:13 PM | ||
| 08-25-2026 06:22 PM | ||
| 08-24-2026 12:26 AM | ||
| 08-20-2026 05:54 AM | ||
| 08-19-2026 07:59 AM |
| User | Count |
|---|---|
| 4 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
