CPU on the ASA is varying from 90-99%, which is impacting performance for everyone. show proc cpu-usage sorted non-zero shows that "Dispatch Unit" is taking around 90% of the CPU. "cap test type asp-drop all real-time" shows a bulk of the entries s...
i use anyconnect cisco for firepower 2100 and somtimes users can't access the anyconnect and displays this error : Please help
Hi. Have a question regarding NAT. We have users that sit inside the office behind an ASA firewall. Users use a piece of software configured to resolve against a dns record which points to an external IP address (note we already tried to change the i...
Hello, all!I am starting to configure FMC and dont't know wich free feeds to choose for the threat intelligence director. I found some tips on different sites:10 of the Best Open Source Threat Intelligence Feeds A List of the Best Open Source Threat ...
Hello all!I am working with a vendor to pass a certain VLAN between 2 sites of an organization so that phone calls can be made by extensions and not having to dial a 10 digit number. I only have access to the 1 of the sites firewalls and I have been ...
Hello team,I'm aware that in the past in order to achieve user to ip mappings you could implement the User Agent, even if you didn't have FMC you could integrate the Firepower module through ASDM directly to the User Agent. And then to perform the Re...
Hi,As far as I can see it is only possible to order the ASA-5506 as an ASA with Firepower services (ASA5506-FPWR-BUN) as compared to say the 5508 which can be ordered as either FP services (ASA5508-FPWR-BUN) or as an FTD (ASA5508-FTD-BUN)So my questi...
Hi all,we have setup up a AD realm and a identity police. We want to apply ACLs to allow RA VPN connections for some users to some destinations.The AD realm connection is working according to the test function. When we create an ACL, switch to user t...
Curious if anyone has come across this scenario yet. We have a project to replace some legacy ASAs with some new 2110 FTD appliances and one of the road blocks we are running into is duplicating the functionality on FTD that allows for automated VPN ...
Am I doing something wrong with FMC packet captures or is the system limited? I've had our FMC for awhile now and noticed that when we go into the Device tab, Devices> Device Management> Troubleshoot> Advanced Troubleshooting> Capture w/Trace> Add ...
Hi guys, I have ftd firewall managed via FMC, facing some problem with my guest wireless network.The infrastructure is, we have some services published over internet for public access, on the ftd i have done some NATs and access policy configured. th...
I have a spare 5525X that I'm converting to FTD, and need an SSD in order to do it. I've seen in previous posts, people have purchased a Cisco SSD drive....but for me a Cisco SSD is kinda pricey for something that is mostly just to try out. I'm reall...
Dear Support, We have FMC 2500 appliance where fiber card 10 GB is integrated.we are trying to move the management copper port , to the fiber ports 10 GB. however , if you go to system > configuration > management interfaces , you will only see eth0 ...
I have recently updated Java to latest version as well as ASDM software version to 7.14. Afterwards, I cannot connect to ASA using ASDM due to the error message attached. The following is some parts of call stack in Java console:Trying for IDM. url=h...
HiI am searching for good documents on troubleshooting FTD by using the Packet Capture and Packet tracer and the tcp dump tool that can show the steps for capturing and analyzing the flows on FTD... Can anyone help?Thanks!
