I have a problem where DNS responses over IPv4 are getting dropped between my firewall and switch and are not getting back to the host. This is resulting in failed DNS lookups. Below is my network layout:The DNS standard query responses are getting d...
I have ASA 5585SSP40 one interface naming external and i have interface having zone116 ip address 10.26.X.X from interface external want to connect server 10.92.x.x but unable to connect and when i see in the logs it is showing like this Deny TCP (n...
Greetings, I've recently been tasked with making some of my servers FIPS-compliant. In the process I've run into a problem accessing my sg500x-48p switch via SSH. I get the following error: no matching key exchange method found. Their offer: diffie...
Hello Guys, I'd appreciate it if you'd help me out. I have two firewalls, a primary and a secondary in failover mode, 5 days ago I failed the primary and the secondary took the role of active, so far so good. The problem is that the primary/standby d...
Hi everyone, I can't get fpmc to copy to an sftp server. It's a well tested tftp server and it is currently being used for call manger backups and it has worked for years. All I get from FPMC is this: Backup Name: test_fpmc_backup_20180321103002-...
I have recently bought a firepower 1010 as an upgrade from my older 5510 that I have. Unfortunately I am unfamiliar with the Firepower device manager and can not for the like of me figure out how to forward port 80 from my outside interface to my int...
Hi experts,our ASA (on FPR) is performing site-to-site IPsec VPN Gateway duties, however, "show asp table socket" doesn't show UDP/500 and UDP/4500 (or ESP). (ASA's interface IP address is used as local VPN Gateway address.)Q1. Is there a command to ...
Hi all,I have increasingly been having issues around two new FPR1010s bought as a cheaper basic set of firewalls to add to our network. I was hoping I could get some advice :) 1) My first FPR1010 I thought I would configure the management port so I c...
Hello, Just looking for some clarity around a deployment we are looking to do for a customer. So Basically they are looking to put in FTD 1140's at multiple sites. We will be looking to configure sub-interfaces on this and then the usual ACL's etc fo...
What is the latest update for Cisco 1841 and where can I download it?Below is my current versionCisco IOS Software, 1841 Software (C1841-IPBASE-M), Version 12.4(15)T7, RELEASE SOFTWARE (fc3).
I have been expiriencing an issue since I udpate the asa. Whenever I want to go to edit group policies split tunnel it freezes and I cannot click anything and I have to close that window (no all the asdm) to keep working. It only happens there so far...
Is there any dependency on the mounted ISO when deploying a virtual firewall? Once the firewall is deployed can I dismount the ISO without issue? Thanks.
Hi Guru's, I was looking to block all domains ending with .bar to block list on firepower 9300. I tried with wildcard 8.bar to block domain list under objects>Security Intelligenec > dns list and feeds but its not working. Probably my version which i...
All the file in ASA disk0: has been accidentally deleted, also flash:Now boot the ASA 5506-x by image store in disk1:(USB). When I copy the software image from disk1:(USB) to disk0: ciscoasa# copy disk1: disk0:Source filename []? asa984-20-lfbff-k8....
Hey as the title says, this is my first IPSEC tunnel I've set upit seems like almost everything is good and I have the tunnel active but I cant ping remote hosts I swear its like on config off from workingso very simple set up here at my house (GFIRE...
