Hi Experts, We're running Multi-context Active/standby firewalls on the version 9.8.4.35. We have been asked to delete the VLAN sub-interfaces, it's access-lists and access-groups.Not sure if the sub-interface should be removed first from the specifi...
Forum Posts
Resolved! Port Security
So I am try to add this configuration switchport mode accessswitchport port-securityswitchport port-security maximum 1switchport port-security mac-address stickyswitchport port-security violation restrictTo my Packet Tracer lab however whenever I do...
I have two Cisco ASA firewalls and would like to run these in series for a specific reason, but I would not like to get into the details. My question is how to make it work properly for inbound traffic to reach the 192.168.10.X network and outbound t...
Hello everybody,our customer has a S2S VPN-Tunnel with his Firepower 1120 (7.0.0.1) and a remote Sophos XG.They can communicate through the tunnel but causes error message in the IKEv1 debug outputand the IPSec counters stays 0. The counters of other...
Resolved! ASA Failover Port Connection
For the ASA5525X and ASA5515X, is it possible to support the copper based failover connection between two ASAs in Active/Standby failover without the heartbeat connection being direct, back-to-back copper, but instead connect through trunked switches...
We aren't able to use teamviewer to connect to remote users connected via cisco vpn client. Remote desktop works but would like to see the users desktop. Are there any ports that need to be opened in the vpn connection?
Hello, First if this is the wrong area I apologize, wasn't sure if it should go here or in the VPN section cause it kind of deals with both. I am trying to setup RA VPN on a FPR1010-NGFW. We have only one static IP for our WAN and our email ser...
I apologize ahead of time if this question has already been asked, but my organization is considering purchasing several Firepower appliances for our business. I'm trying to figure out what is included in regards to IPS/AV/Malware/etc protection the...
Resolved! LDAP AAA authentication for ssh
Hi,I want configure authentication in ssh on cisco asa with ldap integration based on a group active directory of admins.Ill'explain, I don't want that every user can login, but only the users in a specific active directory group.Is possible?I try to...
Hello Everyone,We are using a very old Cisco ASA 5520 8.2(3) - I know it is extremely outdated, we will be replacing it next year, but the problem we are facing is quite odd and I want to try to find the root cause of it. It has been working for many...
We are on Cisco ASA 5516. There is an interface 10.50.70.0/23 on the firewall and it has outbound access list set to 'permit any'. But there is no NAT configured for this interface. Yet, systems behind this interface are able to access internet, how ...
Resolved! FMC Security Intelligence Arrows/Numbers
Hello,I haven't been able to find any documentation online regarding this but what do the +/- , Up/Down and the + sign with green circle around it beside the categories actually mean (see screen shot)? Thx in advance for any help provided.
Hello All, I've been troubleshooting an issue with getting Single Signon to work with AnyConnect, using SAML and a hosted id provider. In the end, it appears to have been an issue with time sync. So I wanted to configure both our FMC and FTD to s...
I found that my mail server was classified as Bittorrent in the connection event.But the Port he uses is SMTP 25 port.
I thought I configured dynamic DNS update correctly but it still not working. My DNS server is an internal bind server and I configured the zones in question with allowed-update any. zone "5.50.10.in-addr.arpa" IN { type master; file "db.5.50.1...
