hi,i got an active-standby pair of ASA 5555-X in multi context mode. we'll migrate to a new DC and plan is to remove and use the primary/active unit to the new DC and leave the secondary/standby running in the current DC to lessen the outage.the 100 ...
Forum Posts
We are performing obsolescence on our system and I need to know when the ASA OS will no longer be maintained for security/vulnerabilities.
Trying to build a HA pair of FirePower 1010's running ASA software. Hit an issue with enabling failover without Smart Licensing being active.Issuing any failover command says 'ERROR: Command requires failover license'. I didn't have the same issue ...
I know this an "out there" question, but I have a remote office that has a sketchy internet. I have seen that my asa can handle 2 internet connections in a failover type scenario. I am trying to use a Mifi (cell internet) connection as the backup int...
HII have a strange issue on my Firepower Management Center virtual.As shown attached picture, our FMC running software version 6.4.0.10He has a normal internet connection configured, and is registered with it's smartnet contract.I can install produc...
Resolved! Cisco ASA IPSEC VPN
Hi Do we have support for stateful failover of SITE to Site IPSEC tunnel on Multicontext mode.?I have pair of ASAs 5515-x with 9.8(2) i read the ASA Document...however still not clear. Guidelines for IPsec VPNsMulticontextContext Mode GuidelinesSupp...
Resolved! SFR license issue on FMC
Hi, would anyone please explain to me how to resolve unlicensed sfr devices issue?Issue: We have registered all premium features on the FMC with Cisco PLR license, then we added SFR modules to it expecting those will be licensed as well but still not...
Recently a particular DNS request is being dropped by the rule “MALWARE-OTHER dns request with long host name segment - possible data exfiltration attempt” and this is affecting our access to that external resource. We looked over that event packet i...
In the Access Control Policy, we have mainly 2 rules in order: rule #1: Name: whitelist certain connections; Source Network: 192.168.1.5; Dest Network: 10.10.0.5; Action: Allow ("Drop when Inline" disabled)rule #2: Name: threat inspection; Source Net...
We have Cisco ASA in "active-active" clusters , if there is a change of roles from master to slave (or vice versa) on any member of the cluster, there is a chance that the NAT pool ownership may not get transferred in the process. As a result, the ne...
Dear Community, We have implemented Firepower 2140 FTD's in a routed/inline fashion. We would like to begin enabling Inspection on some of our ACP rules (starting with the Outside -> In Rules). However, we only want the Intrusion Policy to "monitor" ...
hi expert. i am new at cisco asa. i tried to resolve my lab but fail. please help. at DMZ has a web and dns server. public user not access my web server. // julhas
I have a HA cluster of FTD (Active/Standby). On FMC, the monitoring is complaining failures in screenshot below for the Standby FTD. Everything is healthy on the Active primary FTD and FMC... I do not see any blockings or DNS issues...Any suggestions...
DNS based Security Intelligence blocks attempts to resolve black listed names in DNS requests.Does it also block DNS responses containing referalls to black listed names? For example, I try to resolve A (which is a white name).The response does not c...
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 2 | |
| 1 |
