Dearsi have a small setup and i have a below question related to design i have a simple question related to the design we usually keep switches in cross connection between the internal firewall and perimeter firewall if incase of failover between the...
Forum Posts
Does anyone know how the connection attempt: Before user logon, setting works when configured in NAM, and why we would use this setting as opposed to After user logon.
Hello, Bit of a while since I've posted here, need some advice. I'm revisiting the configuration for an active/standby ASA HA setup, and I don't think I've ever totally nailed a proven, recommended resilient topology when thinking about the links to...
could someone please advise how to properly disable SIP ALG on asa. I have tried by no inspect sip but our sip provider thinks it is still on and I could not find it anywhere and how to disable it. Cisco spa112 are totally not getting out on the int...
Resolved! ASA config help
Hi guys, I was wondering if I could get some assistance from one of the gurus here. I have switch config knowledge but not much ASA config experience. The scenario is as follows (diagram attached)Plant Switch: I don't have access to it. It's managed ...
Resolved! ASA 5506-X supported commands
Hello, I would like to know if someone has used the set connection command in a ASA 5506-X; are these commands supported in this ASA model ? Best regards set connection timeout {[ embryonic hh : mm : ss ][ idle hh : mm : ss [ reset ]][ half-closed hh...
Hello I have an ASA 5525-X versio 9.8 and i am trying to install firepower module 6.2.2 but i am still having this error.Module sfr did not respond to session request.Here you are the show version and another command.
HiI have few ASA's in my network for which when I try to do session SFRIam getting the message :"Opening command session with module sfr.Module sfr did not respond to session request." What could be the reasons for getting the above messages ?Has the...
Hi,I'm trying to configure my first Firepower 1010 replacing Fortigate. Few things I'm stuck at the moment.1. How can I configure dhcp options like 150? I don't see that options anywhere in the FDM gui. 2. Is there anything like software switch fe...
Hello, I need to configure an ASA 5545 as a pass-through filter for devices (two, with one inside, and two outside interfaces each) that are connected directly to the internet. They do not want to use Firepower. I have configured one-to one NATs f...
Good morning I am trying to figure out how to configure vlan ACL to filter mac addresses. And cannot make it work! The goal is to block all mac-addresses inside vlan except those are permitted. I found a great article which declares the same in the o...
Resolved! FMC/FTD question
Hello Does anyone know if Firepower would block packets with a via header added to them.?? Thanks
I have a setup with 4 HA pairs of FTD's in the FMC Global domain all running 6.6.4.x. We intend to deploy many more, so have decided we need to segregate access based on geo-location of the FTD's. So I need to create new subdomains for the new FTD's ...
Currently i am required to enable 2 PPPoE ISP link on the ASA, this specific PPPoE link requires to be tag to vlan 500 for it to be working.Since i am unable to created same VLAN ID on separate subinteface on the ASA.Any way i can configure both ISP ...
We are switching over a section of our environment from McAfee Network Security to Firepower. We have several different policies for different customers. McAfee uses a combination of NSP rules, CVEs, and other ways to identify and categorize intrusti...
