Hello @Rob Ingram @balaji.bandi @Marvin Rhoads @Richard Burts @Marius Gunnerud I am using MerakiMx84 Firewall provisioned with 2 WANs, 1st WAN is primary and 2nd WAN is on ready state as Backup. With Help of Preference Internet routes, I setup s...
Forum Posts
I recently setup a VPN to a remote site and that remote site has multiple subnets. The VPN is up and running and subnets can access main site and its resources fine through VPN except internet. Meaning I am unable to access the internet from any of t...
I'm trying to get started on doing the SNMP configurations on the Firepower 1010 devices running 6.7.0.2 OSI noticed in one thread that someone had to modify the address of the diagnostic interface to get it to work. My diagnostic interface has no IP...
Resolved! ASA5525-K9 to ASA5525-FPWR-K9
Hi all, Does ASA5525-K9 have license upgrade to ASA5525-FPWR-K9? Thanks,Hafiz
Resolved! ASA5525 License installed but not used.
We have an ASA5525 with Firepower. We've installed URL Filtering and Malware licenses which show valid in Classic Licenses, but are both showing (0) used. When we try to configure policies, both show unlicensed. How to I apply/enable those license...
Hello, I configured time on my FTD like this:1) Devices -> Platform settings -> Time Synchronization -> Set my clock via ntp from x.x.x.x (IP of ntp server).2) Devices -> Platform settings -> Time zone -> Time zone: my time zone (+3 for my case). Aft...
Hello, I'm attempting to limit what IP addreses can connect to an ASA using the SSL VPN. I would have thought control-plane policing would have worked, however it did not. Here is what I configured:access-list vpn_control extended permit tcp object-g...
So while looking at the logging monitor in the ASDM, I see the following below when just accessing webpages from my PC. Can anyone help explain what this all means as I am not pinging anything. 4 Feb 19 2019 21:24:58 313005 No matching co...
Packet-tracer doesn't work reliably when you have upper layer rules on an FMC. Rules often show traffic is passed, when the FMC will actually block it. I know there is a similar method, and I heard that Cisco will eventually fix packet-tracer to work...
Resolved! Identity Realm Fails to Resolve Hostname
When creating an Identity Realm via FDM the test passes when using the DC’s IP address, the test fails when using the DC’s FQDM.I received the following error:Cannot connect to realm. Messages returned:(For identity policies) The connection test fail...
I have two FTD 2110 devices. There are in a high availability pair. Sometimes they switches automatically for the reason: Inspection engine in other unit has failed due to snort and disk failure (detailed information in the picture). Cisco Fire Linu...
Hi, I have a Firepower 1010 with currently version 7.0.0 FTD image installed (also tried with 6.6 and 6.7), but i am unable to get IPv6 working. My ISP provides me with IPv4 address through PPPoE, and a /48 IPv6 prefix through normal DHCP. IPv4 is wo...
Resolved! Security Question
We are in the process of installing security in our organization. I have made some of the priorities. Could you please confirm if I am missing something on security side. Physical SecurityCCTVWeb SecurityhttpsPatches for allLayer 3 ProtectionVPN IPSE...
Hi,Two days ago, I ran generating a network report for the past 24 hours. Currently, the report has not been generated. How can I stop generating a report?How can I find the root cause of failure?
