Hello! I want to connect the FTD to a AD in order to setup ACLs on user level. But what ive read its only doable from the MGMT port.Management interface, for: identity policies.Data interface, for: remote access VPN (outside interface).Is it possible...
Forum Posts
Hi, I have an ASA 5516-X used to provide remote access VPN solution to clients. Since the outside interface is webvpn enabled I am trying to avoid DDOS attacks to the outside IP by restriction the number of tcp connection attempts to-the-box. I have...
Hello, I have a problem with asymetric routing for a host in our network. A connection comming from www to the host is going through a third party utm appliance to the host 10.10.10.99. The default gateway is a cisco asa 10.10.10.1. In the log of the...
Hello Is it possible in ASA to redirect an URL (yyy.com) to our local DNS Server (x.x.x.x).as this yyy.com is registered as a public domain also we have same local domain, so i need all inside users to access this url (yyy.com) through our local dns....
We have deployed a new FTD Firewall in our environment but we are not able to ping out to the internet. We are able to browse the internet from the Inside to Outside but not able to do simple connectivity testing using Ping or Traceroute. Any assista...
Hello, I’ve configured a IPsec tunnel between a remote site ASA and a headend ASA. The remote site ASA has 2 Internet circuits so 2 crypto maps tied to each outside interface. The headend ASA has one internet circuit with one crypto map with 2 peers....
Hi friends, I have two FTD's in Failover with virtual FMC in version 6.4. I configured an Intrusion Policy, Balanced Security and Connectivity, and I applied the Intrusion feature in some of my access control policy rules. What do you recommend me to...
Resolved! Change SFR IP address
Hello,We have an ASA with Firepower Services. The ASA is a 5545-X with software version 9.6(2). We have a virtual FMCv wich is the manager of the SFR device. The FMC has an ip address in the vlan 10.11.12.x, and the SFR has an ip address in the 10.11...
Hi All,Is there a way to snmp poll active users per vpn profile?I only can see a total number for all profiles Regards,Shadi
Helle everyone, I'm actually having trouble with the implementation of a firewall in Transparent mode. I have the configuration below , a router is connected to another one within a /24 subnet. I need to implement a firewall without changing anythin...
Hi, We'll be moving an application from an older ASA to FTD running 6.6 code. This application uses non-standard FTP ports and I'm trying to understand if I have all the rules and policies correct on FTD. I can't reliably test this with a serve...
I have a question about Firepower jion the FMC. i can be sure network connectivity is normal and the key is match. but the process is stop 50% and still 115 hours。 it seems like still running 。 thks
After receiving some user reports, apparently all Firepower rules are getting ignored in my ASA-5508X.I was unable to find what is wrong.Nothing related to Firepower was recently modified. The SFR policy is the same and enabled. It matches all LAN se...
Hello,Im trying to add grandstream IP phones to Cisco ISE, IT i as authenticating and i am even receiving an IP address but i can not make calls. Please help me.OverviewEvent 5200 Authentication succeededUsername C0:74:AD:17:59:6BEndpoint Id C0:74:AD...
Hi.I would like to monitor a portchannel interface on a FPR 2130 using SNMP but no traffic is shown when the snmp polls the device. Every value is just 0. If I poll a subinterface on the above portchannel interface traffic is shown and everything is ...
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 2 | |
| 1 |
