Hello, i have to following problem.Connected via anyconnect (vpn ip address 10.10.10.239) , i am not able to connect to 10.10.11.10 which is on interface bvi2ASA# sh versionCisco Adaptive Security Appliance Software Version 9.8(1)Firepower Extensible...
Forum Posts
Greetings all. I got a Cisco ASA 5585X in context mode. With 15 Contexts (12 in Routed mode and 3 in Transparent mode) And i need to assigned all of them a management IP. Currently i´m using Management0/0 for alle routed mode Contexts. (one /24 net...
Hello, Once the Firewall is set up, is there a way to configure the management port as regular ethernet port? How can I do that and what would be the limitations? Can I still have access to ASDM through this or other ports if I change it to regular p...
Hi all, 1) I can open the syslog through the System --> Monitoring --> System of a Cisco IPS through the Firepower Managment Centre. The problem is how to download all these log from all the pages? 2) I export the Kiwi syslog from Alert Configuration...
Cisco helped providers with Wi-Fi calling and then didn't give us guidance on how to open ports on Cisco ASA firewalls to support it. I opened a TAC case and they are clueless. Can someone get this to a product manager within Cisco to give us ASA g...
Hello, Can you advise , is it possible to configure Cisco ASA side with Policy Based Site to Site VPN and AWS side Route Based VPN ? So far I know AWS does support only ROUTE based VPN.
Good day, Kindly assist with the latest feature comparison between FTD and ASA with firepower. Regards.
Hello, I trying out ISE device administration, wanted to restrict for a user to send command 'username', so below is how I set TACACS+ profile and command sets. TACACS+ profilepriv-lvl=4 command set But when I tried to login, command username succes...
Summary A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload.The vulnerability is due to an internal state not being...
Hello all, I would need some suggestions regarding a configuration I would like to implement.Basically I want to create a New DMZ for a new Infrastructure we are setting up,new DMZ leg in the ASA.Let`s say this DMZ Subnet is configured on the Core Ro...
Is it possible to silence drop events from the IPS? I do not see a way in the policy, unless I am missing something. Looking for option 'drop (but DONT generate event).
We cannot connect from our different logical VLANs but can connect to inside and DMZ zone. Users on my different logical VLANs the (PSN) network cannot reach any of the other PSN network. inside and DMZ is ok they can reach them. This is already in...
Resolved! ASA 5505, Read-only filesystem
Hi!I was doing a change in m ASA5505 today, but when I was trying to save it to memory, I got the message"Building configuration...Cryptochecksum: xxxxxxxxxxx%Error opening disk0:/.private/startup-config (Read-only file system)Error executing command...
Hello Fellow Networks, I am encountering problems TCP:443 extracting a vFTD v 6.6.0 capture generated whilst in diagnostic-cli privileged EXEC Mode. vFTD http services have been stated allowing access from the appropriate subnet:ngfw1# sho running-...
I have a range of IP's which are assigned for Internet facing servers. I had already defined all of my HOME_NET in which I also included publicly addressable internal IPs which I would like to monitor. However I had not added these external facing ne...
