Hello Experts @Marvin Rhoads @Rob @Sheraz.Salim @balaji.bandi @Mohammed al Baqari @Richard Burts Whenever I configure IPsec tunnels, I checked Phase DH group and encryptions (DES/AES/SHA etc) and in Phase 2 select the local and remote subnets...
Forum Posts
Hello everybody,I have just setup my first FMC (6.6.1) for a ASA Failover Pair (9.8(2)20)with Firepower modules (6.6.1).At the moment still no traffic will be handled by the module (neither"sfr fail-open" nor " sfr fail-open monitor-only" is currentl...
Cisco ASA with FirePOWER Services brings distinctive threat-focused next-generation security services to the Cisco ASA 5500-X Series Next-Generation Firewalls and Cisco ASA 5585-X Adaptive Security Appliance firewall products. Cisco ASA is the world'...
Resolved! FMCv smart license for ASA 5525-X
I have a pair of ASA 5525-X that I want to convert to FTD image. I built a new FMCv 6.6 to manage them.I converted the ASA firepower classic licenses to the smart license already. I also registered the new FMC to the license portal...But the license ...
HelloWe have a vendor asking us to renew a Cisco Asa 5516X license So in the Asa we were given that the license is for life. can someone explain me please
Hello Folks! I'm using one anyconnect VPN URL to different access and it is working, but the users have to type the URL every time that they will connect to the VPN.Example: I have department X,Y and Z, when the user try to connect, the ISE will see ...
Resolved! Cisco ASA - changing LAN port
Hello Guys I have ASA working with having CRC errors on LAN interface and Cisco TAC said move the port to another. To assign the same IP to another available interface, I have to delete the config on current Interface which will also delete NAT or...
Hi, I am using a Cisco FP1010 running ASA software. The ASA software on the 1010 runs on top of fxos.I installed 3 software bundles 9.14(1), 9.14(2) and 9.15(1) (using the downgrade disk1:/<image> disk1:/<config>)How can I manage these images?a) How...
Hello,We have just upgraded FTD 2110 firewall to firmware version 6.6.1. Since the AC element count is 800k, FMC shows a warning message "the number of access list elements generated for the access control policy exceeds the limit for this platform",...
Hi,we have ISP1 and ISP2. There is metric 1 for ISP1 and metric 2 for ISP2. both ISP are in separate zone. when i create flexconfig for specific souce with ISP2 which is not working and still hitting ISP1 only.\ i have configured below flexconfig.1. ...
The WLAN on my ASA 5506w just stopped working, when i look into it, it says bad mzip file, uncompressed to wrong length and will not load the image. Also i cannot get the AP module online to tftp a new image to it. Is there anyway to salvage this dev...
Upon boot the LED indicator for WiFi on this ASA-5506W cycles through blinking green to blinking red. The documentation says it means "Ethernet link not operational". Since this is a hardware addon, I assume ethernet link is hard wired inside. To mak...
Hi,we have a FMC ver 6.3.0.3 and FTD 5516-x both have been workingCurrently FTD is working with 4 interfaces (outside,outside2,inside,LAN-B,LAN-c). LAN-B and LAN-C are the new interfacesFor hosts the default gateway is a router that also hande MPLS c...
Resolved! GRE Tunnel (Packet Tracer Bug?)
Hi Guys, i have some issue with GRE Tunnel in Packet Tracer during my Training.. all the setup is correct, both tunnel is up/up, but i dk why it just cannot go like 192.168.1.2 -> 192.168.25.2 -> 10.0.0.2
I am trying to push software update to FTDs from FMC FMC running 6.6.1 version and same version trying to push on FTD but it gives error message. Pre upgrade validation - snort version on device is out of date. Deploy access control policy from FMC ...
