Network Security

Firewall Migration Tool v7.0.0.1 now live!

Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...

Resolved! VTIs between ASAs

Hello all, I have 2 ASA connected with a similar configuration than the attached file. If I need to connect, let´s say, 10 more ASAs between them (full mesh). What is the easiest way to do it? I have to create new tunnel-group and a interface for eac...

Resolved! Anyconnect SSL client uses IPSec?

I am trying to setup an AnyConnect SSL VPN connection and receiving an IPsec error? The error I am getting is:"The IPsec VPN was terminated due to an authentication failure or timeout"The Group policy that I am using has only SSL AnyConnect checked ...

Resolved! trying to remove an access-list line from a config...

I am simply trying to remove the last light (highlighted in bold), but can't figure out how to do it... access-list outside_1_cryptomap extended permit ip object-group Dupont object-group MECaccess-list inside_access_in extended permit ip object-grou...

Resolved! QoS on ASA 5545-X with Firepower services

Hello, I know that QoS is supported for routed interfaces on Firepower Threat Defense devices only.There is a way or workaround to limit de bandwith use of Youtube, Facebook, for example, in a rule in the FMC administering the SFR module of ASA with ...

Cyber Vision License Cost?

What is the cost of a cyber vision license? Do you only need one for a network? Or one per IC3000 switch?

Resolved! Cisco ASA5510 Network Speed is half

Hello, Can anyone assist me with see why I only get half the Network Speed on my ASA. I have 1GIG Internet and I can only get 500 Mbps or less when using the ASA5510. Is this a license issue or something? I changed the speed to AUTO/AUTO or FULL/FULL...

EEM e-mail with authentication

Hello all, I am trying to send an e-mail via EEM using authentication.action 1.0 mail server "$_email_server" to "$_email_to" from "$_email_from" subject "$_event_pub_time:Test" body "$_syslog_msg" source-interface GigabitEthernet0/0/0 port 587 secur...

Cisco FTD to ASA

Hello Team, we have new cisco firepower 1010 & it come with FTD IOS. we want to use this as ASA. can someone share simple process to convert FTD to ASA.

FirePower1010 Identity Source unknown error

I am trying to add an identity source and fill in all the fields. But the test failed:"Cannot connect to realm for Identity policies. Message returned: The connection test failed with an unknown error."Domain controller is available from FirePower, t...

Resolved! Cisco ASA NAT exemption

Hello Guys @balaji.bandi @Marius Gunnerud @Rob Ingram @Aref Alsouqi I have a internal lan interface: 172.16.10.1/24 and it is gateway. 172.16.10.40 is another router connected internal for specific external routes . so any traffic which goes fro...

Resolved! FTD 1010 same security interface traffic issue

Hi everyone,I’m having a strange issue with a new FirePower Threat defense installation My Company has an MPLS that connect all the branch offices and an Internet connection for Internet Navigation The FTD is configured in routed mode just to protect...

Resolved! Cisco ASAv missing AnyConnect image

I'm trying to evaluate the Cisco ASAv and have deployed it on Azure but I cannot configure it to allow VPN connections because ASAv is missing the AnyConnect image on flash. It tells me to download it from the Cisco site but I tried that and cannot ...

host won't get ip address from dhcp after port-security is enabled

Hello, I have the following issue:When I enable port-security on a port, the client isn't getting connection anymore.I am unable to ping the client also.I am contemplating to implement port-security on most of my switches (c2960xr), however I can no...

Cross Connecting FPR 4110 in cluster mode with FPR 1100 in HA

Hi Guys, am wondering if is it feasible to do a cross-connection between two firewalls one in cluster and the other in HA.i currently have an internet firewall that I want to connect to the Datacenter firewall.from FPR 4110 I created a port-channel t...

cross connecting fpr 4110 in cluster mode with fpr 1100 in HA

Hi Guys, i am trying to connect an fpr 1100 in HA used for the internet, directly to the datacenter firewall which is 4110 in cluster mode. i created a port-channel on the fxos of 4110 and on HA the port-channel on fxos in 1/7 from both chassis are ...

Network Security

Forum Posts

Firewall Migration Tool v7.0.0.1 now live!

Resolved! VTIs between ASAs

Resolved! Anyconnect SSL client uses IPSec?

Resolved! trying to remove an access-list line from a config...

Resolved! QoS on ASA 5545-X with Firepower services

Cyber Vision License Cost?

Resolved! Cisco ASA5510 Network Speed is half

EEM e-mail with authentication

Cisco FTD to ASA

FirePower1010 Identity Source unknown error

Resolved! Cisco ASA NAT exemption

Resolved! FTD 1010 same security interface traffic issue

Resolved! Cisco ASAv missing AnyConnect image

host won't get ip address from dhcp after port-security is enabled

Cross Connecting FPR 4110 in cluster mode with FPR 1100 in HA

cross connecting fpr 4110 in cluster mode with fpr 1100 in HA

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

Change IPS and AMP Policies to enforcement mode

FTD SSE Connector Service down

Problem with ssl decrypt-resign on Cisco Sefure Firewall

FTD reboots and the active firewall losts all of the User ID entries

ASA AD LDAP Authorization belonging to multiple groups

ACL on VTY Line Blocks All Connections

ASA Help With NAT for Printer

Does the FMT overwrite all FTD configuration if only selecting NAT

Can't ping from FTD managemnt to FMC

IG not mapped to SZ on FMC/FTD