Is it possible to use a different IP from our WAN subnet for RA VPN? We currently port-forward 443 to an internal proxy server on the interface IP. We do this for a couple of reasons. I realize I can use a different external port for this but tho...
Español PortuguêsFrançaisРусский 日本語简体中文 This event is a chance to discuss about Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) regarding products, management, installation, configuration, implementation, use, and integra...
Hi good morning.I am trying to configure fail over in ASA, I have two ASAs with the same OS and the same model.I have assigned the ips address for each interface.All tests are passed(See screenshot) except for the second that failed.How canI debug th...
Hello, I have a FRP 2120 running ASA I am creating a port-channel (EtherChannel) and I would like to assign to it some of the ethernet interfaces of the ASA. When I go to the interface of the ASA the Channel Group is grayed out. From the chassis ma...
hello together, i have a server where i cant change snmp deamon port and which is not 161. and i have a monitor system where i cant change snmp to ask at another port then 161. in between there is an asa so i thought maybe its a good idea to just rew...
Hi,I have an inside network and a DMZ, I have some services on a server that are published internally and externally with the same address: example.test.com. For external connections I have set up a reverse proxy server in DMZ. example.test.com -> 17...
Hi Guys,I need your help on how to limit the bandwidth from 200Mbps to 100Mbps burstable to 200Mbps facing end customers interface? Is there any command on how to set this up? I tried the Class-Map with Policy map but when I'm in the pmap-c "police" ...
HI,Pls suggest me how to to do the following tests in FTD (Case 1)Test Item -Detect Land AttackTest procedure /Reference - Same Source IP/port to destination IP/Port to be generated on the outside interfaceExpected result - Deny traffic should be sh...
Hi, Can anyone please help me understand how often FTD gets deployed ? I am asking this question because in our environment I see deployment pending on few devices. Also I am seeing "applied policy is out of date" will this effect on FTD's ? Thanks...
We had a previos TAC case open when the engineer created an asp-drop packet capture. It wasn't deleted, and we're having a problem today, so I decided to crank that up to see what packets may be dropped. Packets are flying across the screen, and I ca...
HI, I have Firepower (FTD) in HA managed through a standalone FMC, There is a peculiar issue, Whenever my Primary unit is active and I deploy , I get the error " Deployment failed due to communication Error", So I have to switch over to secondary u...
Hello Guys!I have a question about Cisco ISE restore from backup file. I don't understand the option "include ADE-OS". In documentation I found: Option: include-adeosDescription: (Optional, applicable only for configuration backup) Enter this comman...
Dear All,I have a standalone FMC managing 2 FTDs in HA, Recently I observed that Primary unit is showing disabled and secondary take on as active. During trouble shooting,It is found that I could not ping Manager(FMC) from primary unit [FTD]I could s...
Hi, Our monitoring is showing MEMPOOL_HEAPCACHE_0 2% freeCan anybody explain to me what it means and how i can fix the issue: sh verCisco Adaptive Security Appliance Software Version 9.8(4)25 Firepower Extensible Operating System Version 2.2(2.124) D...
Our ASA [ver. 9.10(1)] does multicast routing and the source is directly connected on inside. Every once in awhile a multicast stream (group) does not get forwarded to the RP (outside) and is dropped (show mfib ), and stays dropped. Performing a clea...
