For the ASA5525X and ASA5515X, is it possible to support the copper based failover connection between two ASAs in Active/Standby failover without the heartbeat connection being direct, back-to-back copper, but instead connect through trunked switches...
We aren't able to use teamviewer to connect to remote users connected via cisco vpn client. Remote desktop works but would like to see the users desktop. Are there any ports that need to be opened in the vpn connection?
Hello, First if this is the wrong area I apologize, wasn't sure if it should go here or in the VPN section cause it kind of deals with both. I am trying to setup RA VPN on a FPR1010-NGFW. We have only one static IP for our WAN and our email ser...
I apologize ahead of time if this question has already been asked, but my organization is considering purchasing several Firepower appliances for our business. I'm trying to figure out what is included in regards to IPS/AV/Malware/etc protection the...
Hi,I want configure authentication in ssh on cisco asa with ldap integration based on a group active directory of admins.Ill'explain, I don't want that every user can login, but only the users in a specific active directory group.Is possible?I try to...
Hello Everyone,We are using a very old Cisco ASA 5520 8.2(3) - I know it is extremely outdated, we will be replacing it next year, but the problem we are facing is quite odd and I want to try to find the root cause of it. It has been working for many...
We are on Cisco ASA 5516. There is an interface 10.50.70.0/23 on the firewall and it has outbound access list set to 'permit any'. But there is no NAT configured for this interface. Yet, systems behind this interface are able to access internet, how ...
Hello,I haven't been able to find any documentation online regarding this but what do the +/- , Up/Down and the + sign with green circle around it beside the categories actually mean (see screen shot)? Thx in advance for any help provided.
Hello All, I've been troubleshooting an issue with getting Single Signon to work with AnyConnect, using SAML and a hosted id provider. In the end, it appears to have been an issue with time sync. So I wanted to configure both our FMC and FTD to s...
I found that my mail server was classified as Bittorrent in the connection event.But the Port he uses is SMTP 25 port.
I thought I configured dynamic DNS update correctly but it still not working. My DNS server is an internal bind server and I configured the zones in question with allowed-update any. zone "5.50.10.in-addr.arpa" IN { type master; file "db.5.50.1...
Hello everyone As the title says, we have multiple FTDs managed by an FMC and when I try to generate a backup for them, this will remain stored locally inside the FTD. The remote storage seems to be configured properly as when I test it through the "...
Hi,Have CRL file on Cisco ASA a maximum dimension in order to cache it? For example, on Cisco VPN Concentrator 3080 the maxuimum dimension is 1 MB.Thank you.Best regards.Massimiliano.
Hi every one I'm fine tuning the limit rate on arp inspection, but I itch in my head over the correct understanding of arp inspection burst interval. In fact, another person has asked the very same question https://www.mail-archive.com/ccie_security@...
I have ASA 5506 version 9.8(2) in my office which connected to two (2) ISPs. I had implemented PBR to split our LAN subnet JTP and WIFI_JTP to respective route map. Subnet JTP which comes from wired vlan route-map to ISP 2 MYNET static ip and subnet ...
