Hello all, I would need some suggestions regarding a configuration I would like to implement.Basically I want to create a New DMZ for a new Infrastructure we are setting up,new DMZ leg in the ASA.Let`s say this DMZ Subnet is configured on the Core Ro...
Forum Posts
Is it possible to silence drop events from the IPS? I do not see a way in the policy, unless I am missing something. Looking for option 'drop (but DONT generate event).
We cannot connect from our different logical VLANs but can connect to inside and DMZ zone. Users on my different logical VLANs the (PSN) network cannot reach any of the other PSN network. inside and DMZ is ok they can reach them. This is already in...
Resolved! ASA 5505, Read-only filesystem
Hi!I was doing a change in m ASA5505 today, but when I was trying to save it to memory, I got the message"Building configuration...Cryptochecksum: xxxxxxxxxxx%Error opening disk0:/.private/startup-config (Read-only file system)Error executing command...
Hello Fellow Networks, I am encountering problems TCP:443 extracting a vFTD v 6.6.0 capture generated whilst in diagnostic-cli privileged EXEC Mode. vFTD http services have been stated allowing access from the appropriate subnet:ngfw1# sho running-...
I have a range of IP's which are assigned for Internet facing servers. I had already defined all of my HOME_NET in which I also included publicly addressable internal IPs which I would like to monitor. However I had not added these external facing ne...
Hello, can someone help me configure a whitelist on Firepower to only allow access to netflix. There's a built-in application filter for netflix's but I get an error.
I have a problem where DNS responses over IPv4 are getting dropped between my firewall and switch and are not getting back to the host. This is resulting in failed DNS lookups. Below is my network layout:The DNS standard query responses are getting d...
I have ASA 5585SSP40 one interface naming external and i have interface having zone116 ip address 10.26.X.X from interface external want to connect server 10.92.x.x but unable to connect and when i see in the logs it is showing like this Deny TCP (n...
Greetings, I've recently been tasked with making some of my servers FIPS-compliant. In the process I've run into a problem accessing my sg500x-48p switch via SSH. I get the following error: no matching key exchange method found. Their offer: diffie...
Hello Guys, I'd appreciate it if you'd help me out. I have two firewalls, a primary and a secondary in failover mode, 5 days ago I failed the primary and the secondary took the role of active, so far so good. The problem is that the primary/standby d...
Hi everyone, I can't get fpmc to copy to an sftp server. It's a well tested tftp server and it is currently being used for call manger backups and it has worked for years. All I get from FPMC is this: Backup Name: test_fpmc_backup_20180321103002-...
I have recently bought a firepower 1010 as an upgrade from my older 5510 that I have. Unfortunately I am unfamiliar with the Firepower device manager and can not for the like of me figure out how to forward port 80 from my outside interface to my int...
Hi experts,our ASA (on FPR) is performing site-to-site IPsec VPN Gateway duties, however, "show asp table socket" doesn't show UDP/500 and UDP/4500 (or ESP). (ASA's interface IP address is used as local VPN Gateway address.)Q1. Is there a command to ...
Hi all,I have increasingly been having issues around two new FPR1010s bought as a cheaper basic set of firewalls to add to our network. I was hoping I could get some advice :) 1) My first FPR1010 I thought I would configure the management port so I c...
