Hello, I'm facing issue related to NTP from ISP to inside host TOPOLOGY: ISP modem--->Outside_Int--->ASA--->Inside_Int ACL:access-list VLAN100_IN extended permit tcp any any eq wwwaccess-list VLAN100_IN extended permit tcp any any eq httpsaccess-list...
Forum Posts
Is it me or is this the most unintuitive, undecipherable, difficult to use and maddening configuration page ever? Can anybody shed some light on how this page is supposed to work? Thanks
Resolved! FTD Smart Token
Hello,Question about the smart token for my FTD 2130.I have 2 FTD to create a cluster A/P. How many tokens do I need? One for each FTD or not?Thank you.
Resolved! FMC: High memory and swap utilization
Hello everybody,our monitoring system showed a warning because high memory andswap utilization of customers FMC 6.6.0.1 (running on VMware).I went to the expert mode and the top command showed the following:root@M-Firesight:/Volume/home/admin# top to...
Hi,I have upgraded the FTD software on a couple of ASA 5508-X from version 6.3 -> 6.6.0.1After the upgrade I noticed the following warning message in the CLI. FPGA UPGRADE Version : 2.4FPGA GOLDEN Version : unavailableROMMON Version : 1.1.13WARNING: ...
Resolved! Firepower 4140 Chassis Port Channel help
Dear Community, I am attempting to create a couple of port channels on my 4140 appliances. I tried to do this through the FMC but it appears I may need to do it via the Chassis Manager? I am trying to create the port channels via the Chassis Manager,...
Resolved! cannot ssh an interface: deny IP spoof
Hi all,I thought I have fixed one problem but actually I have created another. I got an ASA 5508, connected to AWS cloud via AWS direct connect, which uses a cross-connect in the datacenter, and communicates via BGP (this is not a VPN). AWS net: 10....
Resolved! Account creation within CDO
Hello, I have the first account for CDO. I would like to create another one in order for another person to have access. Could I do that via CDO?Is there a guide? Thanks and regards, Konstantinos
Hello, Whats the difference between traditional Cisco ASA with firepower vs new Cisco Firepower threat defence. why customer will go for Firepower threat defence, if they already have Cisco ASA with firepower services. what are the benefits of FT...
Hello, We're having a problem accessing an outside SFTP server and suspect the problem has to do with the ASA. The connection is unexpectedly dropped. I seem to remember a while back having similar issues, but can not remember the solution. Is there ...
Hello all,Is there any way to load files into the flash or to running-config during the startup?We deploy cisco ASAv with terraform, but since there is a 16K limitation on the config template, we're looking for an option how to load the missing confi...
Firepower 2100 upgrade to ASA 9.12.4.7 will cause reboot loop. Was just hit by this bug and was luckily able to recover. Found this in the bug search: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvw24700 You can downgrade through console port, ...
Hi everyone, I cant seem to get this to work so here's some information about the network and what I need so hoping someone can guide me into configuring this correctly. I'm running ASA 5505 v9.2 ASDM v7.9inside interface: 10.2.1.1DMZ interface: 10.2...
Hello there,I got an ASA 5508 which I recently configured to connect to AWS cloud via BGP (through the AWS direct connect). Now I simply need to ssh my inside interface from an IP in cloud but in the ASA I can see the message:Failed to locate egress ...
Here is what I mean, I have vFMC managing several FTDs and I have a parent ACP applied to all the FTD. Each FTD also has its own specific ACP rules. I also have site specific Prefilter to bypass the inspection for Site to Site traffic. The over ACP r...
