Hello, I ran an upgrade on my FTDs which are in HA(Active/Standby) from 6.4.0 to 6.6.1 version via FMC.. the entire procedure was completed successfully however both the members became active/active once the upgrade finished and the traffic is now fl...
Forum Posts
Does the ASA 5585 support ECDHE ciphers like ECDHE-RSA-AES256-GCM-SHA384? I get error message trying to enable them, and I don't see them available: sho ssl ciphers all These are the ciphers for the given cipher level; not all ciphers are supported...
Resolved! Check that you have proper anyconnect package installed in Anyconnect client Software Menu
Hi All (image attached) Since upgrading to the latest version, we're not able to see our Anyconnect profiles in the Anyconnect client profile section on the ASDM, We have created these XML files around 6 months ago. My account has the relevant priv...
I have configured a VPN site to site IPSEC tunnel from ASA to Draytek with IKEv1 and PFS disabled but Phase 1 stuck in MM_WAIT_MSG2. Phase 1 and 2 configs are identical and cross-verified multiple times.What can be the issue?Phase 1 policy used:crypt...
Resolved! ACL on ASA5506 issue
Hi I've just finished creating NAT on my ASA, which is mentioned in another discussion. Now I'm doing a test with laptops, but it seems that I can't get traffic through. I believe it's an ACL-issue. I need to pass all traffic through from both sides....
Hello All, We have an FMC 4600 Version 6.7.0 that manages all of our ASA SFR's in Production. We are wanting to build a two port port channel on the FMC and are not having much luck. I see articles about that it is capable, but there are no configura...
Dear all,Background:1. In Malware & File tab, I´ve created a New Policy and I´ve added MSEXE type in it and I choosed Block Files in Action.2. I´ve added above New Policy in "Access Control", "Inspection" tab.3. My Access Control worked properly and ...
Hi everyone.We have two 4110 chassis cluster configuration in our large DC with FTD 6.4.0.9 appliance.Both chassis connected to core switch WS-C6509-EA few month cluster can work properly, then after maintenance reboot, they cannot join the cluster t...
Hi, can anyone advice me about how to get overall throughput or bandwidth of a customer network to to verify if my proposed ngfw 2130 with 10g uplink is able to match network overall bandwidth or throughput through one 10g link between network anf fw...
I want to test the native vlan using Cisco ASA. Does ASAv 9.9(2) supports native vlan? If yes is there any reference or configuration guide for it as i am not able find any guide. Thanks and Regards,Mohammed Fazil
Resolved! ASA Ping does not work
I have a Cisco ASAv connected with 2 c7200 routers in gns3, connected with inside interface and the other connected outside. The ip of interface inside is 11.0.1.1/24 and the ip of interface outside is 12.0.1.1/24Below is the ip of c7200 interface co...
Hello! We are preparing to install a 2110 FTD 6.2.2 High Availability pair (managed by an FPMC). 1. Is it possible to use a wildcard certificate? 2. If not, is it possible to use SANs? Each FTD has to have its own unique name, such as ftd1.<dom...
I am planning on upgrading my trusty 5506-X to a 5508-X and I would like to know if I can expect an interface performance improvement for the on device management option in ASDM. The 5506-X is quite slow, and I have gotten used to it, but if I am goi...
We have the rquirement from our management to use a four eyes principle (Admin1 makes a rule change, Admin2 has to approve in order for it to be deployed) so mistakes like one admin brings down the whole company with one misconfiguration can be avoid...
Hi All, I have recently built an ISE 2.7 instance and I am trying to configure TACACS authorization based on the Group the user belongs to. I can do this with an AD (External Identity Store). But when I try to do the same with Internal users and grou...
