Dear Colleagues, Help me please to solve the issue below. I need to change 175.125.68.17 to 175.125.68.22 Feb 05 2021 23:15:34: %ASA-4-402116: IPSEC: Received an ESP packet (SPI= 0x9D6197B7, sequence number= 0x7) from 175.125.68.1 (user= 175.125.68.1...
Forum Posts
Resolved! Two ISP connection in my ASA
Hi there, I have 1 ASA 5510 version 8.3 with 4 interfaces. outside1, outside2, inside and DMZ. Both outside1 and outside2 interfaces connected to ISP1 and ISP2 respectively. And core switch connecting my ASA with all my internal users. My current pro...
Resolved! Retired Certification
Hi, I have completed Cisco "IPS Express Security Account Manager Representative" certification before 3 years and now want to renew it but this certification has been retired. I raised a case with Cisco Certification and Communities Support Team but ...
Hi, correct me if I am wrong but does this sentence below mean, that I do not need the SF-FMC-VMW-2-K9 licence if my devices are all classic devices, so ASA with Firepower modules? Firepower Management Center Configuration Guide, Version 6.7 - Licens...
Dear All, I'm trying to create an asa-v (using CML 2.1.2-b39) sub-interface to make able a host to configure it via ASDM, but despite the configuration is not working.Please advise if I'm missing something.Here the configuration of the asa-v / switc...
I need some clarity on SSH and certificates. I have SSH enabled on a router which has a signed certificate loaded. The Putty client has the root CA loaded. Putty connectivity works. The question I have is that SSH access works on another router wh...
We are setting up ISA 3000 firewalls as FTD in HA pair. We have a unusual challenge wherein, switches on both upstream and downstream have same vlans and we need to use firewall to segment traffic between certain vlans. E.g., Upstream has VLANS 1,2,3...
Resolved! RA VPN on non-interface IP
Is it possible to use a different IP from our WAN subnet for RA VPN? We currently port-forward 443 to an internal proxy server on the interface IP. We do this for a couple of reasons. I realize I can use a different external port for this but tho...
Español Português Français Русский 日本語 简体中文 This event is a chance to discuss about Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) regarding products, management, installation, configuration, implementation, use, and ...
Hi good morning.I am trying to configure fail over in ASA, I have two ASAs with the same OS and the same model.I have assigned the ips address for each interface.All tests are passed(See screenshot) except for the second that failed.How canI debug th...
Resolved! Port-channel on FRP 2120
Hello, I have a FRP 2120 running ASA I am creating a port-channel (EtherChannel) and I would like to assign to it some of the ethernet interfaces of the ASA. When I go to the interface of the ASA the Channel Group is grayed out. From the chassis ma...
hello together, i have a server where i cant change snmp deamon port and which is not 161. and i have a monitor system where i cant change snmp to ask at another port then 161. in between there is an asa so i thought maybe its a good idea to just rew...
Hi,I have an inside network and a DMZ, I have some services on a server that are published internally and externally with the same address: example.test.com. For external connections I have set up a reverse proxy server in DMZ. example.test.com -> 17...
Hi Guys,I need your help on how to limit the bandwidth from 200Mbps to 100Mbps burstable to 200Mbps facing end customers interface? Is there any command on how to set this up? I tried the Class-Map with Policy map but when I'm in the pmap-c "police" ...
HI,Pls suggest me how to to do the following tests in FTD (Case 1)Test Item -Detect Land AttackTest procedure /Reference - Same Source IP/port to destination IP/Port to be generated on the outside interfaceExpected result - Deny traffic should be sh...
