Hi all, We have a server which requires to go out on a specific interface "outside3". I tried to set it up so it will route to outside3 but somehome the traffic still go out at outside2. This is what I configure for that change:access-list outside3...
Forum Posts
Resolved! VPN tunnel is not up in ASA context
Hello,I have created a new context in cisco ASA5525 and configured site to site VPN in context. Phase -1 is not coming up and i am getting the below messages while running debug. We have a tunnel configured to same peer IP from a diffrent location h...
Resolved! 9.4.x > 9.8.4.20 ASA Upgrade
hi,due to the recent ASA CVE alert, i need to do an upgrade 9.4 > 9.8.https://tools.cisco.com/security/center/viewErp.x?alertId=ERP-73830 just want to confirm that i can upgrade directly 9.4 > 9.8 as per link below:https://www.cisco.com/c/en/us/td/do...
We are hosting a web page and it can be viewed internally by it's private IP (192.168.42.4). It can be viewed externally when using our public IP address. However it cannot be loaded internally by using the external IP. It asks to log in (to the rout...
Hi,In an existing network setup i have an ASA with route based tunnels to Microsoft Azure and AWS.How would i allow for remote vpn connections (Anyconnect) to access the resources over these tunnels? As i also have vpn tunnels to other sites.I am afr...
Hi ,I have an ASA 5506x and need to throttle down the download link (upload as well but later).I have tried the QoS policing feature using both input/output and ASA does police but the link is unusable - pings keep dropping when I just open a website...
Hello There! I implemented the CSM early this week, and we are configuring the authentication process, we have a tacacs+ server running on ISE the authentication and authorization policies have been configured and our domain accounts are able to auth...
So this is not primary about ASA, but I have the same question on an ASA,I have never worked with a Cisco RV325 in the past, there is this feature inside of the port forwarding menu that you can forward ports 1~65535....If we do that, how can the ove...
Folks, I'm working through the guide found here: https://www.cisco.com/c/en/us/td/docs/security/asa/asa914/configuration/general/asa-914-general-config/ha-failover-cloud.html#id_53631 When trying to contact tools.cisco.com (to license the ASAv) it ap...
Hello,I 'm trying to work out the configuration to provide HA (Active/Standby) between two FTDs running on two FPR4120 to a pair of ASR1002 routers. Each router has a link to each of the FPR4120s. The FTDs are running as routed. EIGRP is will be r...
Resolved! FirePOWER Updates
From the FMC / System / Updates - For Sensor patches and also FMC patches, do I need to install them one at a time or can I install the latest one only which will cover all patches beforehand? E.G Lets us assume that for a sensor I have available - 6...
Hi,I have ASA 5555-X running IOS Version 9.12(3)12. I have 2 Syslog servers. I want to send debug messages to one of the servers but only specific messages to the second server as it has limited capacity. Does anyone have an idea on how should i filt...
Hi I have Cisco 2911 and iOS version 15.0(1)m7Site A and B. Both side site public IP is dynamic. I would like to know is it possible to configure VPN between them. If it's possible please explain what kind of vpn is suitable.Thank you
Hi, Is it possible to download self-signed certificate from cisco IOS router to update on a computer.We are trying to stop warning messages pop-up while connecting to anyconnect VPN client.
Hi,ASA Software Version 9.1(7)23Cisco ASA 5520We ran a test for our VPN firewall on Qualys website and it showed some week configuration points. i.e. TLS1.2 is not enable TLS1.0 is enable. I understand TLS1.2 is not supported in this version.Under t...
