Hi, I am using a Cisco FP1010 running ASA software. The ASA software on the 1010 runs on top of fxos.I installed 3 software bundles 9.14(1), 9.14(2) and 9.15(1) (using the downgrade disk1:/<image> disk1:/<config>)How can I manage these images?a) How...
Forum Posts
Hello,We have just upgraded FTD 2110 firewall to firmware version 6.6.1. Since the AC element count is 800k, FMC shows a warning message "the number of access list elements generated for the access control policy exceeds the limit for this platform",...
Hi,we have ISP1 and ISP2. There is metric 1 for ISP1 and metric 2 for ISP2. both ISP are in separate zone. when i create flexconfig for specific souce with ISP2 which is not working and still hitting ISP1 only.\ i have configured below flexconfig.1. ...
The WLAN on my ASA 5506w just stopped working, when i look into it, it says bad mzip file, uncompressed to wrong length and will not load the image. Also i cannot get the AP module online to tftp a new image to it. Is there anyway to salvage this dev...
Upon boot the LED indicator for WiFi on this ASA-5506W cycles through blinking green to blinking red. The documentation says it means "Ethernet link not operational". Since this is a hardware addon, I assume ethernet link is hard wired inside. To mak...
Hi,we have a FMC ver 6.3.0.3 and FTD 5516-x both have been workingCurrently FTD is working with 4 interfaces (outside,outside2,inside,LAN-B,LAN-c). LAN-B and LAN-C are the new interfacesFor hosts the default gateway is a router that also hande MPLS c...
Resolved! GRE Tunnel (Packet Tracer Bug?)
Hi Guys, i have some issue with GRE Tunnel in Packet Tracer during my Training.. all the setup is correct, both tunnel is up/up, but i dk why it just cannot go like 192.168.1.2 -> 192.168.25.2 -> 10.0.0.2
I am trying to push software update to FTDs from FMC FMC running 6.6.1 version and same version trying to push on FTD but it gives error message. Pre upgrade validation - snort version on device is out of date. Deploy access control policy from FMC ...
Resolved! Firepower Sensor Upgrade from FMC
Hello Current SFR version on ASA is : 6.2.2-81 Our FMC version is : 6.2.3.5 I am trying to push Sensor update (6.2.3.5-52) from FMC to ASA Firepower Sensor, it says "No valid appliances available for Cisco Network Sensor Patch 6.2.3.5-52 This u...
My project is to connect a firewall WAN interface to Cisco Prime, I should keep tracking the interface utilization on my firewall until it reaches a specific bandwidth. when for example the bandwidth reaches 30 Mb, I want to receive a notification or...
We created rules to block inbound and outbound traffic using a geolocation object. Both rules were at the top of the ACP, and were basically inverse of each other. The rules were set up as follows:-----------------------------------------------------...
Resolved! ASA NAT Configuration
Hi all, I have an ASA 5525x with PC-A on the INSIDE network with IP address 10.20.32.40. PC-B is in DMZ with an IP address of 10.20.30.10. The security level for INSIDE is 100 and DMZ is 50. I have rules to allow PC-A to communicate with PC-B over...
Resolved! FMC/FTD
HiWe have FMC 100 and FTD 2130, when I do a packet tracer on the device its saying traffic is allowed but I cant find the ACL on the ACP that would allow this traffic, its almost as though there is an hidden ACL which is allowing certain traffic whic...
Hi Team,I wanted to make you aware that we will have a series of monthly 30-45 minute technical webinars regarding the migration to Snort 3 This is highly relevant for ALL FirePower customers. The content is technical in nature and is designed to all...
Hi, This is my first post, I have a Cisco Firepower Chassis 2110 with Virtual ASA running on it. I am trying to only get the Syslog or realtime logging for any users logging in directly to the Cisco Firepower Chassis 2110. Can someone help with this...
