I have a Cisco firewall with Security License bundle,Part number: ASA5506-SEC-BUN-K9I need to set up 30 remote access users using the Anyconnect VPN client.Does ASA5506-SEC-BUN-K9 include the Anyconnect VPN client license?If not, which license pack ...
Forum Posts
Hello community, I am trying to use the Captive Portal with a FMC/FTD deployment that is at version 6.6.1. I got the Realm configured and downloaded the users, using the Digicert root CA as a trusted CA since the LDAP certificate is a wildcard certif...
Hello, I'm upgrading an FTD from 6.2.3 to 6.6.1 and keep getting the following errors in the logs: **********************************************************[210113 13:34:41:525] Starting script: 000_start/101_run_pruning.plentering scriptDraining di...
We want to enable our GEO-IP and use the whitelist/blacklist from connection events. We have a White/Blacklist of GEO-IP objects, we'd like these in the GLOBAL ACP so they are applied everywhere.No matter where I place the GEO-IP block rule, if it is...
HiI Send estreamer from FMC 6.7 to Splunk 8.1 every things work fine except that I cant send original client ip address and HTTP response code.extended option is enable in estreamer.conf:"archiveTimestamps": true,"eventExtraData": true,"extended": ...
We are using ASA and Firepower for internet filtering in Data Center. Our requirement is to control internet access on 'Need basis' only -- Allow what is required and block everything else, this includes the servers. So far so good. We are trying to ...
Resolved! Umbrella AD Connector Upgrade impact
Hi guys, I´ve got the message that we should upgrade our Umbrella AD-Connectors for all AD-Controllers.My question-> Is there any impact if I upgrade the AD-Connectors one-by-one? We´ve got 2 VA´s and 4 AD-Connectors. Kind regardsPhilipp
Hi , I'm configuring FTD HA managed by FMC.I was confused with Monitored Interface configuration when configuring FTD HA. I've outside interface going to router an inside interface connected to switch.If I put standby IP address for monitored interfa...
Hi experts, I'm building the Multi-instance setup in FPR 4145. In each instance should i need to consider the HA links?
Resolved! 6.6.1 to 6.7 Upgrade Stuck
Hello All,So yeah, here is what the log is showing and it's been almost 24 hours, TAC is still investigating and this sucks. Any ideas and how can I stop/fix this. I'll update my post here as soon as I find a solution but I would like to see if anyon...
I have an odd situation involving two ASA firewalls that I'm trying to configure to allow traffic to-and-from both the outside world and our main private network to reach the private network of the 2nd firewall.I have no problems getting the traffic ...
Hi all, I'm trying to setup a IOS(-XE) based ZFB-firewall to filter and block traffic between 2 LAN-segments. I have a list of ports which I want to allow but I find it hard to find an example to match a port in a class map if the port does not match...
I have a pair of 5555-X ASA running 9.3(1) that I plan to upgrade to the version 9.14(1.30). I am planning this as an outage to services that traverse the firewall but am wondering what the true impact will be. Since I have two in an HA pair (activ...
Hi, There would a way to find out SFP serial number for out of band interface. I got Please serial number for ethernet ports and slots. But i did not find serial number of SFP for out of band interface.Model - 4125I have used below commandftd/fabric-...
Shall we able to run selective operating system(.iso) for file behavioral analysis in TG?. For example customer is having only windows 8 machines in their infra....so analyzing the files behavioral based on windows 8 platform on TG will be sufficient...
