Hey all,I am having an issue that I am a bit perplexed with. While I am not an expert in the firewall area, I have the task of creating some rules to lock down our lab firewall. Right now most all of our VLAN rules are "permit ip any any".Here is the...
Forum Posts
Resolved! ASA5515 - deny ICMP dst outside
I get an error some in a while about Google DNS:%ASA-4-117145: Deny icmp src Z245:172.23.123.67 dst OUTSIDE:8.8.8.8 (type 3, code 3) by access-group "Z245_access_in" I'm trying to understand it, but my mind is frozen.I have to permit icmp for Z245_ac...
HiDoes anyone know if its possible that FTD might be adding latency to traffic? we have a site to site with a 3rd party where we nat our clients going to them (Dyanmic) and we have static nat for our servers where they keep their own address, what we...
Dear Community,I recently ran into a situation where the Manual NAT rule was doing NAT Divert, causing traffic to be diverted to the Outside interface, eventhough the destination IP was on the Inside interface. I wanted to make sure I am understandin...
I have several PIX 501 firewalls. These have all been configured with addresses on both inside and outside interfaces. These have all been password protected. I am trying to do a pssword reset using the np63.bin file and tftp. I have went over and ov...
Hi, want to change FTD4100 password by using below command, Is this recommended way to change admin password on FTD and Is it going to disturb any internal DB level access/communication. >configure password I also changed admin account on ASA firew...
What is Difference between firewall and UTM appliance
How do I get SW1 and SW2 to be pingable on the ASA?1. Redundant interface should not be used. Because the real product is Firepower. Firepower does not support redundant interface.2. I want the ASA to have one IP. So I used BVI interface and bridge ...
Configuring ASR 1001-x to use LDAP. what is interesting is that I add the servers, two, and the config shows up as being configured. When I next add the servers to a group, "aaa group server ldap LdapGrp". it will return ok. Next in the ldap server g...
Hi everyone, I'm having a hard time understanding why my ASA shows I have the 3DES-AES encryption disabled. I have a security plus license on this device. Furthermore, I have already requested a free encryption license through the licensing portal. ...
Hi everyone,I successfully configured Cisco FPR1010. Unfortunetly now I can not connect to FXOS. FPR1010 boot directly to ASA code and when I want to connect from ASA CLI to FXOS i get that error.The details you can see below. Can you give an advice ...
Resolved! Missing tab in Summary Dashboard of FMC
Hello, I noticed that in Summary Dashboard of FMC, is not anymore available the Network tab.(Most probably it has been accidentally deleted) Do you know if i can restore only this tab in the dashboard or i have to restore the FMC configuration back...
What is the proper ACL to block internet on one server using an ASA 5545 version 9.6(4) 20?
Resolved! Enable SNMP v2 on FTD 1010 using FDM
Hello,We use SNMP v2 through solarwinds for remotely monitoring our devices. We have a Cisco FTD 1010 we are deploying to a site using FDM. I understand you can use flexconfig to enable this, but I'm having some troubles. I verified I have access rul...
After doing some tests with clogin, the configuration of the interfaces had been changed.From ospf message-digest-key 3 md5 W@tytl#3459Qaz -->> ospf message-digest-key 3 md5 *****From! - before clogin tests interface GigabitEthernet0/1.128 vlan 1...
