Hi ,I try to configure to setup NAT with ASA firewall.i would like to do below design.All outgoing traffic of web server,server2 (app network)and PC network are doing nat with outside interface(10.1.14.70) for outgoing traffic. i also want to do NAT ...
Hi All, WS-SVC-FWM-1 running FWSM Firewall Version 4.0(16) While ago the device generated and sent following syslog messages:Number of cached deny-flows for ACL log has reached limit (4096) Is there any workaround for this issue? Thanks,Myky
I come to you because I have a problem in the office.Our ASAs in failover 5508-X lose connectivity on the outside interface, therefore the back up interface is activated and in order for it to work again, the ASAs must be restarted. This has been hap...
Dear Experts I am replacing the 5585-X firewall with the newest NGFW,, actually i want to know the current throughput ( i am not mentioning sh cpu history information which will display the how much high the cpu went in peak hrs ) on 5585-X SSP20 i...
Hello Community. we are thinking of providing differed managed services to our clients using existing FTD and manage them through our FMC cluster.now we need to confirm if we can run the FTD that is already in inline mode with passive functionality s...
Hi.I'm currently engaged with TAC regarding a defect on FTD 6.6 / FPR1120. Seems there's something wrong...in 6.4: Management port is working at both 100Mb/sec and Gig Speed.in 6.5 : Management port is working only at Gig speed during reimage and sub...
Hello everybody I made a VPN ikv2 but does not up phase 1, I think a Conver all but no work. I was talking to my networking friends and the only different in them configuration and mine its this My Config group-policy DfltGrpPolicy attributesvpn-t...
Hi, We have defined our main network as inside on our Cisco ASA. Then we defined vlan (sub interfaces) within this interface and add groups that allow access to each vlan (departments). So far all works as expected. We also allow inter and intra com...
Good day All, I have the requirement to replace a currently running ASA 5550 with a new 5555 (actually must do this twice)I have, using the Quick Start guides, and with help from here, got the new 5555 up and running, with a default config, and the l...
Here are some ACLs on my switch , but some of them are useless I want to clear them up ,but I'm not sure which one is useless , when I show access-list I can see some are match ！ I just want to make sure is there any better way to do that ? or Is th...
Hi Community, “Hardware Bypass is not supported in high availability mode.”https://www.cisco.com/c/en/us/td/docs/security/firepower/660/configuration/guide/fpmc-config-guide-v66/inline_sets_and_passive_interfaces_for_firepower_threat_defense.html Doe...
I am migrating a customer from an ASA 5505 to a FirePower 1120 with IPS and AMP services. I have a few questions about the onboard device manager vs the management center. The ASA config is not terribly complicated - it has a single static route for ...
I was able to import a PKI trustpoint using the crypto pki trustpool import terminal command and copy and paste the pem file. However, when I try to import the same file from flash:. I get an error: (config)#crypto pki trustpool import url flash:myce...
Hello,we have a strange problem with an ASA5510:After an update to version 9.1.7 all ports are down.What we have done exactly:We were on version 8.3, first updated to version 9.0 and then to 9.1.7. After that everything was ok.After that we had to re...
Hello guys, i am facing an issue during migration of ASA into Firepower. I was able to install the boot image but during installation of the system software i met this problem. Starting upgrade process ...Populating new system imageUpgrade failed for...
