I am helping a client create a Vendor VPN on a 5515 ASA. They will be limited to a single subnet but need access to one internal IP address for internal DNS. We have the ACL's in place but DNS will not work. I did an asp-drop packet capture and am...
Forum Posts
Hello Experts @balaji.bandi @Rob Ingram @Richard Burts @Marius Gunnerud @Leo Laohoo I updated Cisco ASA Fimware and VPN packages. The VPN Packages updated from 4.8 to 4.10. Is there anyway Cisco ASA push update of AnyConnect client on all the m...
Hi,Can anyone tell me where I can view the current time on FMC console, running v6.4.0?Looking at the current time is important while analyzing the connection and other events. I could not find time anywhere in FMC.Please help.Regards,Mohan
Its been bothering me for a while now. The flow charts on all Cisco documents show that 'VPN Decrypt' happens after checking for 'Existing Connections'. (see attached flow chart). My question is, how will FTD know whether the connection is existing o...
I have established OSPF neighbors with ASAv and routers Outside, dmz_b, inside_1 and inside2.Each router has its own loopback interface from 1.1.1.1 to 4.4.4.4 as below showed. But 3.3.3.3 cannot establish OSPF neighbor of ASAv. But I have advertise...
Can someone help me on this? what command line should I use in the head office firewall? thanks
Resolved! ASA 5585 upgrade question
I am planning to upgrade ASA5585-X from ASA 9.1(7)16 to ASA 9.12(4). Both versions are 9.x, but there is big difference between these two versions. Is there anything I need to be aware of? HW= ASA5585-X
I have working, Site 2 Site VPN between 2 location and ASA1 is managed by me.The ACL at ASA1 in inside interface is from source 192.168.1.1 to dstn 172.168.1.1 at port 3389 .I want to know in which interface the ACL has been applied on ASA 2 if it is...
Hi All I've an ASR1002 which NAT some traffic.Since I check the translation table , some lines dont show anything about protocol and instead show "---" so too about outside local and global.(The red part in picture)Anyone knows what the story is ?Exp...
I'm sure you all are familiar with the CIS controls. We've had a couple issues tied with (I think) one of the changes, and one we can't get resolved. I believe the issue comes from "password encryption aes." We initially deployed the changes to 3 fir...
Resolved! Cisco Firepower 4140 Twinax support
Dear Community, Does the Cisco Firepower 4100 series ( or any other chassis for that matter), support the following: -SFP-H10GB-CUM3-SFP-H10GB-CU7M-AO-SFP-H10GB-ACU10M According to this link I believe it does, but wanted to be sure. https://www.cisco...
We have a Cisco firewall that can be accessed through the web interface called Firepower. I discovered that there is a geolocation rule that blocks visitors from South Africa. The issue is that we recently got a student from there that cannot visit ...
Hi, The Pix 501 that has been in place for quite some time acting as a firewall between two LANs LANA - ip address outside 192.168.45.241 255.255.255.0LANB - ip address inside 192.168.44.240 255.255.255.0 This config has worked ok as devices in each ...
Hi everyone. I planing to migrate my Prefilter rules to ACP, the only reason I'm not doing yet that work is because actually have 700 line of rules.. Is any way to migrate prefilter to ACP using some script ? Regards.
Hi there,i have configured cisco asa firewall properly and configured http server and IP's as well properly,but when i am trying to access the url in browser to install the asdm its not opening this url ... the error is attached.also i am pasting the...
