For some reason I cannot ping my DMZ IP from outside through static NAT. Packet capture shows the success ping from dmz out but failure on outside in. Packet trace shows that it should be successful. Included is all the relevant running config. # sho...
Forum Posts
Hi all, I'm in the process of building a Cisco 2120 FTD appliance in Multi-Context (ASA) mode and I'm strugging with getting remote management access via telnet/ssh. I've configured a bunch of standalone (HA pair) ASAs before and i have previously wo...
FTD ver 6.6.3 is running on FPR2110Logging from Lina is workingLogging from Access Control, all next generation of events are not sent to syslog, there are sent to FMCCisco states a reboot will solve the problem. Rebooted and it worked for a while th...
Hi allI tried use ipla or track in context Cisco ASA 5516xBut I didn't find solutionMy idea is;We have 2 outside to Internet in the same context (internet) I know it is working in Firewall Mode (Single) but in Context I didn't find solution thank you...
Under Rules there are "categories" .. and "mandatory" see what is the idea behind them? Does anyone have an example or document that define the strategy someone might use to apply there? I don't see much out there about there about them... Thanks!...
I have 80 pairs of older 5525 and 5545 ASA's. Need to migrate their configs to new FTD 1145/1150/2130 FTD's. Do I need a staging FMC or can the migration tool import and export the config. Looking for a way to automate.
Resolved! Cisco ASA 5512
Hi All, I would like to disable enable password. Currently, we are using version 9.9.Trying this command but not work:no enable passwordenable password ( without key in any password) Which command needs to run. Please help user-identity default-domai...
I want to extend a vlan of 1 subnet between two sites like an extension using VXLAN between two ASA's as I know that ASAs support VXLAN, is there is a way to do this or impossible using ASA, it seems straight forward on other firewalls like fortigate...
We have found TSLv1 weak encryption algorithm in FTD in audit and they suggest mitigate it with latest TSLv. But in present we can see only TSLv1.2 is available with in FMC, both FMC and FTD version 6.4.0.7.Is it close once we upgrade it with TSLv1.2...
Hello, We have a pair of ASA5585 configured in HA and I am trying to understand if the ASA can do ECMP on a port that's configured with sub-interfaces. The Cisco document below describes that ECMP can only be done on the same port/interface. "Multip...
If I want to send specific syslog messages via an event class, will specifying "error" as an example send only error syslogs?
Hi Team I'm using FTD on ASA 5506x v6.2.3.16-59 (managed by Firepower Device Management) with updates:Two days ago I've reported to BrighCloud support that http://www.szachypolskie.pl/ should be categorize (it was under Uncatogorized category). I've ...
Hello for everyboy. Have some issue with adding this device in zabbix monitoring.According config guide for FMC for firepower 1000 series i need to create snmp settings161 port for zabbixcommunitysystem admin name - admin (admin name for FMC or Fp114...
We are using SolarWinds-Orion as our centralized monitoring tool and we are also monitor the Cisco Firepower Management Center(FMC) & Cisco Firepower Threat Defense (FTD) as part of it. While running the custom report for 'Device Inventory' on SolarW...
Hello, I have an ethernet cable coming from an outside source that is supposed to relay information to a PXI chassis I have on my system. I would like to protect the PXI chassis from this outside source and don't want to plug it in directly to the mo...
