We have two ASA 5525Xs who's management interface is on our OOB management network (172.16.8.0/22). Until now, the ASAs were sending SNMP (for port traffic) and NetFlow traffic to a server (172.16.4.45) on one the ASAs standard interfaces (172.16.4.0...
Forum Posts
HelloI created a site to site tunnel. The vpn is up but the truffic does not pass. Attached the logs found.Cordially
Resolved! Network Link Encryption
Hi all, hope to find everyone well in this timesI had a request from a costumer where he said that I need to have all the network links encrypted but I have no clue how to implement this.Basically the core of the network is comprised by Cisco 9300L i...
Resolved! Two default routes in FTD-2130
Hello guys, I'm using FTD-2130 version 6.3.0 managed by FMC version 6.5.0, how can we use two default routes to the Internet ...
Hi All, I am working with a very peculiar design requirements, where we are using FMC4500 and FTD 4140 with container instances. We have assigned a Eth1/8 interface as logical management interface to be shared by all containers. Now the requirement i...
Resolved! SAML Redundancy for Cisco ASA
Hi Everyone, I have customer who has an ASA in Active/Standby mode and have SAML Single-Sign-On configured. The SAML SSO works fine but during failover, it gave and error "Authentication failed due to problem retrieving the single sign-on cookie. ...
Hello, Zone Based Firewall is dropping packets from one interface to another and I cannot understand why.1) There is a zone-pair between both interfaces2) All IP traffic is allowed3) In the log says (target:class) - (none:none). Not event class-defau...
Hello, I am facing a problem to have RDP port forward to a PC inside the firewall on ASA-5506-X. ASA version 9.8.Ethernet port 1 configured as ouside, ethernet port 2 configure as inside_1, ethernet port 3 as inside_2. other enthernet ports are disab...
Resolved! Monitoring FPR 1120 by FDM
Hi team! I currently have an FPR 1120 which I manage from my FDM. The version of Threat Defense used is 6.4.0 102. I require network management much like ASDM does with ASAs. With URL filtering, network throughput management, etc. Is this possible w...
Resolved! ASA 5585-X 10GE license
hello I have two ASA 5585-X in an Active/Standby failover.I tried to install the 10GE license on both units. I am getting the below error. SHZF-DBFW-5585X-01# activation-key d81ace61 1838c7b5 7870a944 85949800 c73b0680Validating activation key. ...
Resolved! Firepower (FTD) HA designs
We are looking to get 2 new FTD's and want to deploy them in a HA pair, I've been going thru docs and designs and noticed all of them show a RTR as the edge device and both FTD's coming off of that. (with private ip addresses on the outside interface...
Resolved! allow webvpn access from 1 IP address
Good Day,I would like to lock my ASA-5506 down to allow WebVPN access only from the remote office. I am thinking I need to apply an access-list to the external interface?webvpnenable outside permit 8.8.8.8 255.255.255.252 <-- used google dns as an ...
Hello all,I am able to ping from R4(G0/0) to R1(G 0/0).But not from R4 to R1. Because R4 is behind ASA. I have copied the images and details for reference.R1 -10.0.0.1/24 R4 -10.1.0.1/24 R1-R2 -10.0.0.0/24 R4-ASA -10.1.0.0/24R2-R3 -20.0.0.0/30R3-AS...
Resolved! ftd dhcp relay with fdm
I am running an ASA5506x in FTD mode. Managing it with FDM. I can't seem to find an option to create a DHCP relay. I have found documentation on how to do it with FMC so I assume that it is possible with FTD. Any idea if there is a way?
Hi, Recently, I have faced a strange error while I was trying to access my FMC GUI after 1-2 months! The server returns the following error (Image 1) and nothing stops it. I have tried to restart my virtual FMC and also tried to change GUI password i...
