Hi All, I have a Cisco ASA 5516-X 9.6 pair on HA .Inside 1 VLAN 100 10.10.10.0/24 -Prodinside 2 VLAN 200 20.20.20.0/24 - DevCommunication to a networks 30.30.30.0/24 & 40.40.40.0/24 in another DC is via MPLSNow there is a DR planned wherein we will h...
Forum Posts
Resolved! FMC HA deployment and managed FTDs
Hi,4 FTDs in cluster HA Active/Passive should be added to 2 FMCs Active/Passive. FTDs are 4115.I am perplexed on deployment of standby FMC, if it has to be aware of FTDs or not, I just now that passive FMC don't do any actions as long as active FMC i...
Can't seem to wrap my head around this...There's an ASA 5506-X sitting on my desk directly connected to my laptop.I'm having no issue connecting to ASDM when the laptop is connected to the management interface. However when I connect the laptop to th...
I've noticed that unlike with ASA, the FTD appliances are not configured with a standby IP when the interfaces are configured. Instead, the secondary peer interfaces show as unassigned. Just to wrap my head around this - when the appliances fail over...
Hello ASA Gurus, I'm running into a case, I have a lot of APs pointing to a controller hosted in a cloud platform using a public IP addressthe controller has been deleted by error, we were able to recover the controller VM but unfortunately not the ...
Hi - I am having issues as to why I do not have all the options in my Firepower Chassis Manager 2110.Please see the screen shot, but I do not see options like Security Engine, under Syslog I do not see Remote Destinations.I am running a Virtual ASA (...
Hello Team, We are running Cisco ASA 5585 clusters in Active /Standby Mode, Primary unit failed and all the traffic failed over to the secondary, and presently the secondary unit handling all the traffic.My question is when we get the RMA device and ...
i need to configure FTD File policy To block uploading Specific Type of files such As Images and PDF, and Block download .EXE Files, i have tried to do it , but its not working properly , i am using FTD2100 and FMC1000 version 6.4.0.9 on Both , after...
Resolved! CSM Upgrade
Hello Could I upgrade CSM 4.19 SP1 to CSM 4.22 directly or I need to go to an intermediate version? Thanks and regards, Konstantinos
Resolved! Firepower to VPC with ospf
Hello, have anyone had a problem with a portchannel vpc from to nexus connecting to asa Firepower?i can ping between the 3 device but im not able establish an ospf adj between the Firepower and the nexus. NX1 --VPC--NX2| || p...
Over the last week, my tunnel to remote site stops working, random times. Very new to ASA/Security, i come from the routing side. After looking closely at this for a bit I noticed on the show command i don't see the remote route.IPsec:Tunnel ID : 40....
Dear community, I am planning to deploy a Cisco FMC virtual and one of the questions I currently have on my preparation list is on Cisco User Agent. I have seen the red pop-up notice on other FMCs that Cisco User Agent will soon be deprecated and it...
I recently got an ASA 5506-X and uninstalled and installed FP 6.2.3 fresh. I also installed ASA software 9.9.2 & ASDM 7.9.2. I also updated the Rommon to 1.1.18. from the doc's I read, this should all be compatible, but the SFR now goes to Init->UP-...
Resolved! Cisco ASA packet capture
Hello.Is there a way to capture traffic sourced from the ASA itself? For example, how can I capture ICMP unreachable message being sent from the ASA to the Internet? ASA-------OUTISDE-INTERFACE---------INTERNET Which ingress interface should I choos...
Hi,I'm not sure if this belongs in the Security, or the UC sections, but here goes.The scenario is a CUBE gateway on an internal IP address, communication with the ITSP over the Internet via an FTD firewall. The FTD has a one-to-one NAT so communica...
