I used ASA5515 and I found problem with Internet Connection lost.For example. I'm able to access the internet and sometime I found internet has lost.Please find the details below. I can ping ASA5515I can remote to ASA5515I can ping LAN (inside) inter...
Forum Posts
Resolved! ASA 5506-X - Dual ISP Redundancy
I have a client that would like to add a second WAN connection to there ASA 5506-X. They would like to make there current WAN link as the backup and the new WAN link as the primary. I have been testing in my home lab but I am a little confused. I am ...
ASAHi everyone,I want make a DMZ for run some VM (win10) for communicate on internet without restriction but I want this VMs are isolated from my production network.I have create a new vSwitch on my vshpere environment and I have create a new VLAN on...
Hello Network Security Community, We have a new FPR-1010, without additional feature subscription. What are the options to license it when both Internet access and FMC are not available? We do have a Smart account though. Thanks for your advice and...
Resolved! ASA5555 with Firepower Service error
Hi guys,I have an error as pictures below and I do not know why and how to fix it.I appreciate if there is any help from all of you.for more details:- The error occurs on Standby device, the Master work properly.- There is no log of this error.If you...
Hi there,Thanks for reading. I have a subinterface (SI) on a physical interface (PI) on an FTD 1150 which is directly cabled to my core switch C4500. The core isn't receiving arps for the SI IP address. FTD:PI: Routed interface; no IP, enabled.S...
Hi AllTo show up the ASA as a hop in a traceroute, one can use the 'set connection decrement-ttl' feature in a policy map.During my tests I recognized, that this behaviour only affects IPv4 traffic.An IPv6 traceroute still does not show the ASA as a ...
Hi, I'm on my second attempt of trying to upgrade the FPR2140 to 6.6 from version 6.3. followed the 6.3 guide and it mentions that during the upgrade you get logged out of the GUI, and that it could take 30+ minutes to complete. The guide says not to...
Hi Guys! I'm trying to understand which is the best tool for detecting and fixing security Vulnerabilities in Cisco devices. Please share your opinions and thoughts as well as recommendations as to which tool will be more efficient. Thanks & Regards...
Resolved! Setting up DMZ zone
Hello @balaji.bandi @Aref Alsouqi @Marius Gunnerud @Rob Ingram @Nithin Eluvathingal @Richard Burts @Marvin Rhoads I have one Web server(VM1) which is uses other server as a database server (VM2) and use 3rd server as application server(VM3). Only...
Resolved! FXOS Upgrade Question
Hi Community, I am currently upgrading the FXOS on a pair of 4140 FTD appliances from 2.2 to 2.8. And part of the procedure is to run the following commands:Firepower4100# scope systemFirepower4100 /system # show firmware monitorFPRM:Package-Vers: 2....
Hello, I am looking to upgrade my ASA on Firepower 4110.. Currently i am on version 9.8 While trying to download the image from Cisco i can see 9.12.4 Interim marked as a golden star and listed as Cisco "Suggested"... Does this mean this is the most ...
I am struggling to make sense of the Cisco documentation for firewall rules required for Cisco Cloud Video Interop (CVI) for Microsoft Teams. This is for an environment where videoconferencing traffic is not allowed in or out unless it is explicitly ...
Hi, Has anyone tried integrating Okta or any other two-factor authentication with captive portal on FTD. Couldn't find any configuration example on the same. Any help would be great. Vaibhav
Hi Guys,I am using an ASA and I configured a simple OSPF for its routing so that I can do load-balancing to my 2x routers upstream. Within the OSPF process, I configured redistribute connected subnets so that all connected subnets behind the ASA will...
