We have a cisco anyconnect vpn currently configured with group-alias method to select connection profile. We are in the midst of migrating remote VPN groups from an old firewall into this new vpn firewall with the group-alias. There are more than 65 ...
Forum Posts
Resolved! ASAv in Azure Bandwidth Issue
Hello. We recently deployed and licensed an ASAv in Azure using the appliance available in the Market (verified that the Smart License for the ASAv10 took). No changes were made to the default Azure hardware other than to connect the interfaces to v...
Resolved! FMC IPS Critical Alert
Hi, I am getting an alert on Cisco FMC for IPS. The Snap is attached. Is that normal or we have any fix for that?
Resolved! How to view & verify object-group
If we run show object-group command, it will list down all the object-group on the firewall.Pix(config)# show object-groupobject-group network dmz_servers description: The DMZ shared servers network-object host 192.168.2.3 network-object host 192....
We are running Cisco ASA firewalls in Cluster, yesterday there was alert for cluster failover. When we check firewall uptime, it is showing differently in the system context and admin context. Why uptime showing differently? CiscoASA/admin/act# sh ve...
Resolved! ASA 5515 ISP Migration
Hi all,I know this is a common thread but I'm being pressed to get this sorted ASAP. A new interface, Outside2, to send all traffic of which the vast majority goes down a VPN to a web proxy. There are three VPNs in total. I changed the interface the ...
I am really confused by all these terms and when I look up the internet it's all jumbled up. I understand ASA+Firepower=FTD FMC is a management center, but for what? Only FTDs? Whats is ASDM? Again a GUI version of ASA or a management center of ASA l...
Hi i am plannning to configure a static NAT to all allow ssh to a internal device as below. ip nat inside source static tcp <privat_IP> 22 <public_IP> 22222 extendable i created a zbf in both direct class-map type inspect match-any Internal...
Does anyone know why I'm getting this error: AADSTS750054: SAMLRequest or SAMLResponse must be present as query string parameters in HTTP request for SAML Redirect binding. when trying to launch Cisco Anyconnect from the Azure Dashboard after configu...
Hy,I´ve configured a "default route" in my ASA 5505 (8.4.2) but it is not working. When I try to send a packet toward a internet (public address), for instance 172.217.30.14, the packet is dropped with the message below: Inboud PDU:1. The device look...
Resolved! Zero NAT on inside interface
We have this nat for vpn users nat (inside) 0 access-list nonat_pool --------------------current nat for vpn Also i need IPsec connection for vendor traffic where we do not want nat inside traffic ASA 8.2 nat (inside) 0 access-list NAT...
Resolved! DNS lookups failing for FQDNs
Hi All, I have FMC managing an FTD HA Pair that are not connected on any data interface until migration, they are obviously up on their respective management interfaces, they are living on 4110 Chassis, I am in the final few weeks until migration and...
HI experts, I am wondering what's the specialty of the class-map class inspection_default policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect rsh inspect rtsp inspe...
Hi, I have a Cisco Firepower 4110 and am going to run ASA code on it. If I'm running ASA code on the Firepower can I also use Threat Defense (I know I need the license for this) ? Can you let me know if I require any other components to enable me to ...
A quick question to the community: is there a good reason to upgrade ASA 9.8 to 9.12?I am running mostly Firepower 2100 ASA 9.8. I was wondering whether 9.12 has anything interesting to make it worthwhile?Is it still two separate interfaces, i.e. FXO...
