When I run the hitcount analyzer for an ACP and export it to a CSV, the rules with 0 hit counts do not have a date indicating they were never used. Is this the expected behavior? For some of the rules with 0, I imagine they were used at some point, b...
I have a S2S VPN tunnel to Azure from my 2130 FTD that works, passes traffic and is fairly stable, however, I have recently started to see the above message on the FTP logs. All of the networks identified in the error can access Azure networks so I a...
Good Day,FMC and FTD are running 6.6.1I am simply trying to add eigrp to one of my FPR-1010s. I created the flex config text object: 170Networks and gave it a value of 192.168.170.0 255.255.255.0 I have also tried just entering the subnet without the...
Hello, I have CDO and I have imported an ASA configuration without any physical device. I see that the policies and the objects are OK. But the VPN configuration is not present. Is it necessary to have a physical device for the VPN config to be imp...
Scenario:Laptop can connect to wireless backhaul link through VLAN and out to internet with a static IP, but when ASA is connected using the same IP, it cannot see the internet. ASA is functional on separate WAN using same configuration. Troubleshoot...
Hello, I am experiencing issue with HA configuration between 2 ASAv. Please find below the failover configuration for the primary and the secondary: act# show failoverFailover OnFailover unit PrimaryFailover LAN Interface: FAILOVER GigabitEthernet0/...
Hello all and hope you are doing well, I am creating a Discussion regarding this issue although there are plenty more on the Cisco Community.I have got 2 cases that I would like to monitor the VPN Site-to-Site and Remote Access of a Firepower 1140 an...
Hello, I have a couple of questions about onboarding on CDO.I have FTD 2120 and the OS is ASA 9.12. When I am going to onboard it, I will choose FTD or ASA on CDO? In order for the CDO to find the device I will have to assign a public IP to it righ...
I am newly setting up these ISA 3000 firewalls and have no backgound on it. I want to setup FTD on these, but after consoling in, it seems it came with ASA installed. Going through the guide here, it doesn't specify how to convert ASA to FTD and my u...
I have local website behind FP1010 FTD and its not workingwhen i started the RAVPN was using the legal IP with port 443, and this server is pointed to the same legal IP and for sure use the same port 443so when you open the website the vpn page to do...
hi,just a quick question, i noticed there's a couple of ways to define TACACS/AAA in an ASR router: under global config and the other is under AAA server group. my questions are:1. will the "server-private' and "ip tacacs source-interface" work on th...
We worked on cleanup firewall rules on ASA, some acl rules no hit increased over months and show connection also get none, but when we removed the rules impact and caused incident and found most rules related to ssh. any reason can cause it and what'...
Hi all, I'll have to deploy two FMCs (on premises) in two DCs geographically separated, the second DC is the DR My question is, can HA between two FMCs be done using different networks as per schema below?thanksDavide
hello allafter port security configuration my cameras are not working which are connected to the switch but all the other devices are working good like Biometric which are in the same switch.help me out in this regard.
