HelloWe have an ASA5510 v9.1.(7)32 at branch with configured IKEv2 site-to-site VPN to Head office.All traffic goes through VPN.ISP give an ip-address by DHCP with 4 gateways (yes, multiple), that randomly changes. Some of them reachable via ICMP, so...
Forum Posts
Resolved! Do I need Threat License with FTD
All,I am starting to convert all my 5516x ASA with FirePower Services over to the full FTD image. I have 22 total to convert and have successfully converted 4 of them over. Now that those 4 are on full FTD image I need to use Smart Licensing instea...
Hello all,Very new here and to Cisco, so I apologize if this is not the correct spot to post.So I am a ACSS Certified Avaya Engineer and I am looking to get more into Networking.I have an older 5520 ASA that I was able to Factory Default and load the...
Resolved! FMC/FTD 6.5 IKEv2
HiI can see on our FMC/FTD that our tunnels use the default IKEv2 policy which includes DF 5,2 if I want to establish a new Tunnel but want to use DF 14 will this require creating another IKEv2 policy and selecting DF 14 or can I just simply select ...
Hi, I know there have been some posts similar to this, but I couldn't find the one that exactly fits my scenario. I recently upgraded my ASA to unified FTD image. I am locally managing FTD with FDM and configured basic ACLs, static routes and basic ...
Resolved! malware block file policy
Dears, I have setup a file policy as per the attached, i can see the logs that the malware has been passed by the file transfer though i have block malware for all the type of the file, can anybody confirm to me by the file/malware events as per the ...
We have an internal VLAN that we wish to have ACLs to allow https traffic for when applications need the access to perform upgrades. If we try to setup NAT it wont let us use port 443 because it is in use with VPN and SSL. The ACLs dont seem to have ...
Hello All i'm hoping you can assist me, i'm trying to convert from the old ip inspect firewall rules to zone based policy'sI have worked out most of the setting however I can't seem to get outside icmp blocking to occurI want clients inside the netwo...
Resolved! FTD/FMC SSL Decrypt Issue
I am doing some testing in a lab environment with the SSL Decryption. Because its lab and I don't have an internal CA that the machines trust I ended up using a public signed certificate so all the clients would trust it. The FTD appears to be doin...
Resolved! FMC split brain question
Community,I am working with TAC on an issue with my FMC's. In the meantime while the issue is being resolved by TAC my FMC HA pair is in a split-brain situation due to the sync being paused. TAC is stating that I can still make and push changes from ...
First VPN config. Missing something simple. ERROR: Address X.X.X.X overlaps with outside interface address.ERROR: NAT Policy is not downloaded.Firepower 2100 series using FDM for configuration. I have configured the VPN for inside network object X.X....
Resolved! firepower 1140 PLR license
Hi,I would like to ask about PLR for firepower. My firepower don't have internet so i run with evaluation license.Now I want to change to PLR.I knew how to switch to PLR from registered the device using smart licensing.But i cannot find how to switch...
Hello All. I have an FTD running 6.6.4. - the current interface config:1. Inside Zone - Interface 10.10.10.1 (network 10.10.0.0)2. Outside Zone - Interface 10.20.20.248 (network 10.20.20.0)3. Route - any-ipv4, outside, global, 10.20.20.1, false, 1 Ne...
I am looking at the "Peak in Use" and "All in Use" numbers of our AnyConnect Mobile users on our ASA and it doesn't appear to be correct. This is what I see: show vpn-sessiondb license-summary sum -su -----------------------------...
HI,I have Cisco Firepower FTD 1010, and due to the fact that we need high available network, i have question if i can order another FTD 1010, and configure both devises with High Availability Active and Standby.Now i have one FTD1010 connected to 3 C...
