hello,I have over 5 years ASA experience, but I don't have any NGFW experience. I wondering if there have big difference between ASA and NGFW ? I mean in the command level...we use ASA for NAT, VPN (IPSec and anyconnect ) ,route, ACL etc...for those ...
Forum Posts
Hi team: I need to provide a kind of second option next-hop for redundancy to PBR configured in the FirePower.I would appreciate someone can confirm whether the Fire Power supports more than one next-hop in the route map, for the PBR.In case is it no...
HI. My client is using AWS <-> FW(not cisco) VPNExisting FW will be changed to Cisco I dont know how to configure Cisco and AWS Site-to-site VPNWhat should I look around for when aws is a VPN? Plz help me
I am trying to learn packet tracer. I add a laptop to packet tracer. I assign the IP address of the laptop:10.0.0.2 SM 255.0.0.0Then I go to command prompt and I ping: 10.0.0.2 I get 100% loss. Can someone tell me what I am doing wrong.Thank you.
Hello All , I have added an SSL cert for the ASA - ciscoasa.ladderbar.com (195.36.189.55) and applied the certificate on the SSL settings on the ASA so when users use anyconnect using the DNS name (ciscoasa.ladderbar.com) it works good and no risk m...
Hi Guys,I recently configured our ASA 5515X firewall with anyconnect vpn. The VPN client can log in and connect to the internet due to tunnel all traffic. However, the vpn clients (192.168.150.0/24) cannot see the internal network on 192.168.0.0/24 (...
Hi,I'm having difficulties renewing a manual certificate on my FMC/FTD at the moment. The old one is expired.We renewed the certificate using the old CSR we had saved from the first enrollment.But after uploading the new CRT, the FMC ends up with tha...
Hello, A vendor is trying to set up a site to site to site VPN connection from their network to a internal router on our network. They have a juniper router on each side with our ASA in between. I have set up a public IP that is natted to the ip addr...
Resolved! Classic License in FMC
I haven't applied a classic license in the Cisco FMC before but I'll need to install a new one as we have one of our license that will be expiring in 3 months. When I install the new Classic license which is for url, does it update the existing licen...
Hi,I'm trying to create logical device FTD with Instance Type "Container" on a 4110 (running 2.6.1). At first I tried it via the FCM, but there I can only select native (the dropdown is greyed out) as you can see:I then found a remark in the Cisco do...
Hello, I have a pair of FTD 1010 in HA. It is a new installation and some time I run into the below problem. The internet is blocked. I am thinking that the FTD downloads signatures or sth like that. Are there any schedules for that? Where could I f...
Dear Team, Need to enable IPS/IDS feature in CISCO ASA 5580-40 model.Kindly help us to how to enable these features.And suggest me any hardware module required for this feature. Current Version: asa845-smp-k8.bin Regards,Chaitanya Gowtham A7680095520
Greetings,I am the process of updating and standardizing our AAA configs. This is a current section: aaa authentication login default group tacacs+ localaaa authentication login console noneaaa authorization config-commandsaaa authorization exec defa...
Resolved! Packet tracer in FTD limitations?
hi out there I just got a bit surpriesed when I was chasing a "hit" in a ACL on a firepower 4110 running FTD OS 6.6.1 - we have ACL whcih is pretty high - near the top - of the policy - which is pretty open but based on AD-group membership. When I ra...
Hi all,We have an FMC appliance deployed in VMWare for managing FTD clusters. However, the system intermittently displays the following warning "High Disk Space Utilization". In general, FMC GUI can take up to 30 seconds to load when you log in and r...
