Hi, We're planning to upgrade FMC to version 6.3.0.Below is the status of the current devices which we've: ASA-5506x, FMC has been given 4GB RAM for the previous iOS version on the VMware. So, can we upgrade the FMC version to 6.3.0 with 4GB RAM on V...
Forum Posts
Hi team,The FMC running version is 6.4.0.9 and FTD also. I installed the patch 6.4.0.10 for HA FTD.After installation, I need to deploy the policy. But I FMC generated below error.Deployment failed the interface on devices are out of date.I have rest...
Hello, How can i do to capture a VPN trafic which is encrypted and passing thought my firewall. Here is the architecture (10.10.2.1) PC1-----------VPN1--ASA--VPN2------------PC2 (10.10.3.1) I want to look the tcp protocols which is sent by PC1 to PC2...
Resolved! FTD Out of Compliance
Hello,My FTD is out of compliance because of wrong contract attachment.Today I just checked my smart account which seems the number of license is ok. I would like to know: How to re-activate my license using FDM (I don't use FMC) From Cisco FTD-smart...
Resolved! IKev2 dh group 27
Dear Team, I need to establish a VPN tunnel between Cisco and Fortigate. Here request was DH group - 27 need to configure in between the site. I am having cisco ISR 1001-X.Hence could you please suggest to me.
Resolved! firewall requirement
Hi,Customer with around 2000 employees and 2-300 servers / applications also need IPS. Which model you guys suggest ?
Resolved! Unable to reach DMZ from VPN subnet
I'm having an issue reaching the DMZ network from VPN. I need to be able to RDP to the DMZ host 10.20.1.2/24 from the VPN subnet 10.2.2.0/24. I have configured the NAT policy and ACLs but still not able RDP to the DMZ host. Please see the ASA 5505 ru...
Hi When user login SSL VPN (ASA 8.0), how to apply group policy base on their user name without to choose the gorup option at login page. The problem is when I check the option for user to choose the group at login page, it work fine. But without tha...
Resolved! BGP in cluster FTD
Hi all, shortly have to RUN BGP a couple of FTD 4115 in HA, managed by a 1600 FMC, it's all on premises. I was wondering about the BGP sessions if they have to be established according to which of the following cases:1) one router peers with both act...
Dear Colleagues, Help me please to solve the issue below. I need to change 175.125.68.17 to 175.125.68.22 Feb 05 2021 23:15:34: %ASA-4-402116: IPSEC: Received an ESP packet (SPI= 0x9D6197B7, sequence number= 0x7) from 175.125.68.1 (user= 175.125.68.1...
Resolved! Two ISP connection in my ASA
Hi there, I have 1 ASA 5510 version 8.3 with 4 interfaces. outside1, outside2, inside and DMZ. Both outside1 and outside2 interfaces connected to ISP1 and ISP2 respectively. And core switch connecting my ASA with all my internal users. My current pro...
Resolved! Retired Certification
Hi, I have completed Cisco "IPS Express Security Account Manager Representative" certification before 3 years and now want to renew it but this certification has been retired. I raised a case with Cisco Certification and Communities Support Team but ...
Hi, correct me if I am wrong but does this sentence below mean, that I do not need the SF-FMC-VMW-2-K9 licence if my devices are all classic devices, so ASA with Firepower modules? Firepower Management Center Configuration Guide, Version 6.7 - Licens...
Dear All, I'm trying to create an asa-v (using CML 2.1.2-b39) sub-interface to make able a host to configure it via ASDM, but despite the configuration is not working.Please advise if I'm missing something.Here the configuration of the asa-v / switc...
I need some clarity on SSH and certificates. I have SSH enabled on a router which has a signed certificate loaded. The Putty client has the root CA loaded. Putty connectivity works. The question I have is that SSH access works on another router wh...
