I have a HA pair of FMC 1600 appliances & all has been well until last week, when the Analysis/Connection/Events view, stopped responding to changes in the event view time selection. The default is the last 1hr, but it only shows the last 30-40 minut...
Forum Posts
Hi there, i have configured port forwarding in cisco asa, but its not working properly, i am not able to ping the ip of outside interface too,i have created a access rule mentioning interface "outside" source is selected to any and...
Hi everybody.I have to firepower 2140 HA on FMC, but one of them reset to factory default.right now I want to add a manager on the factory default device, but I forgot the registration key how can I get the registration key.I find reg_key hash text i...
When pinging Gateway IP of ASA from computer on inside. It is doing Hide Nat (Pat) btw, IP is 192.168.1.110. It gets a response.I try the same ping with the IP on PC using a static Nat I created but it never responds to the ping. I am using ip 192.16...
Hi,I would like ask about tranparent mode ASA.i want to integrate my network with customer network. myl2 switch===>ASAtranparent===>customer switch. Now problem is customer switch configure trunk port which connected to our firewall.my side is create...
Hi All, The customer would like to change configuration interface on vmware from 10G to 1G but We not sure procedure of ASAv need to new deploy ASAv or need method something to support new interface or not. Please advise us for my concern. Because No...
Cisco ASA 5515X Firewall. Getting a coordinated syn attack against one of our websites hosted behind the firewall.. My ASA's CPU is going to 100% and not allowing legitimate traffic through during this attack. It completely shuts down. It is configur...
Hi I have a question.I need to purchase an Expansion I/O module for my firewall.So My company is adding one more ISP to the network.(There is already one ISP existing as outside interface). There is only one unused interface in the firewall. And I ne...
Hiwe have VPN server( Router l2tp ipsec ) on the DMZ interface, we want to allow vpn l2tp ipsec traffic to pass through outside to Dmz my sample config : object network vpn-routerhost 192.168.1.200nat (dmz,outside) static *.*.*.* (public ip address )...
Resolved! ISE Trusted Certificates due to expire
Hi, Notice these Trusted Certificates are about to expire, they seem to be for internal use.I cannot find any information on these or how to renew. Each Node (primary and secondary ) has one. need to be concerned? Lee
Dear experts,I need to configure email alert notification configuration on ASA 9.8Problem is 1. SMTP server port is 465port. How to configure the port of SMTP?2. If ASA contact the SMTP server with the wrong domain name ( like asa@asa.com ), then it ...
Resolved! Multiple IPS policies
Hi, What are the benefits (if any) of having a different IPS policy for incoming traffic to internal servers and another for outgoing traffic focused on users? What is the best practice, keep a single policy for both scenarios that simplify the opera...
Unable to delete SNMP alert on Cisco FMC 4000 due to "alert in use by X policies" bug-like behaviour
On FMC 4000 (running 6.4.0.9 software) I am unable to delete SNMP alerts i.e. on the FMC when I navigate to Policies > Actions > Alerts when I attempt to delete an SNMP alert, the message shown in attached screenshot appears:i.e. "This Alert Configur...
Is there an easy way to put bandwidth rate limits on our FMC Communications? Over the past few weeks there have been a few times our 100 Mbps MPLS is reaching 88% upload, and several of our smaller sites are reaching the high 90's in download bandwid...
I am trying to replace the Cisco logo in the AnyConnect client with our own. I have followed the instructions below, but have not had any success. Has anyone gotten this to work?http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconn...
