Hi,I am having issues to make work a passive FTP server with explicit TLS encryption because ASA is blocking the response on a random port, even when I have enabled this configuration:access-list ftp-list extended permit tcp any any gt 1000!class-map...
Forum Posts
Hi, When checking firepower dashboard, saw a number of connection events that should have been dropped were showing as "would have been dropped" indicating the packets were allowed to flow when they shouldn't have. I'll attach screen shots of a few o...
On 13th of May we updated our Cisco ASA 5525 Cluster from 9.10(1)17 to 9.12(3)12.Today I saw in our PRTG monitoring, that the cpu usage is know on 29-33 % during the night, when it was 3-5% before the update. The CPU usage raised exactly at the momen...
Resolved! Firepower 9300 security module quantity
HelloWe want to purchase firepower P/N:FPR9K-FTD-BUN with P/N:FPR9K-SM-56= as security module. I could find information about one and three security module in the firepower9300 data sheet but there isn’t information about two security modules.Do we h...
Resolved! ASA Failover - Hostname issue
Hi All,I have failover configured between two ASA 5515. I am a bit rusty with ASA..years since I played with one.Anyways, failover seems to be working ok. The only problem I have is that the failover unit keeps changing the name everytime I reboot th...
Hello to everyone, Recently we bought a firepower 1140 threat Defence and i am wondering if i am able to confirure an outside interface with PPPoE. i perfromed the initial configuration and also i dont know how to configure that. i am not able to ch...
Hello for everybody. I need to allow tcp and udp 123 port on external asa interface from two external ntp servers and block from any other. The following acl is currently applied on the external interfaceaccess-list OUTSIDE_NAT extended permit icmp ...
Can anyone describe how PAP works between ASA and Microsoft NPS for RADIUS authentication and how MS-CHAP is different?Please don't tell me that PAP sends the password in clear text. I have taken PCAPs and I see no clear text shared secret or passwor...
Hardware: ASAv30Cisco Adaptive Security Appliance Software Version 9.9(2)1 Whenever I try to enter any show run command, for example "show run" or "show run access-list", the CLI terminal hangs up without generating any output and I have to close the...
How can i change th IP of the Firepower 1120 from the console port???
Hello All, We have a remote office where we run a standalone FTD 2140 appliance. Now there is the need to add that appliance to an existing FMC. The 2140 appliance has locally configured routing (inside & outside interfaces), several site-to-site VP...
Hello. I am trying to configure the dhcprelay enable q-inalextnet command on a Firewall, and it throws the following message:This interface is shared and cannot be configured with DHCP. I found that this is related with a bug ID CSCsv96850. I would l...
Resolved! Clear nat counters on cisco asa 5515-X
Hello for everybody. Is it possible to clear all nat counters on cisco asa 5515-x? Auto NAT Policies (Section 2)1 (inside2) to (outside_nat) source static obj-10.18.8.200 interface service tcp www 83translate_hits = 600, untranslate_hits = 31 In this...
Hello, I stumbled upon a problem today. I have an ASA with firepower services. I noticed that in the events some URLs are shown as numbers and the action is blocked. Is there anything, in particular, I could check to see what kind of error this is?...
Hello Everyone, I hope you are all doing well, despite whats going on with the pandemic. Anyways, I was trying to improve the Host Profile quality exploring several alternatives. Nmap, API, etc. At this time I focused on nmimport.pl and was able to a...
