I have a quick question about my unique situation with Firepower (FTD) devices at each city.I purchased the FMC for 10 licenses. (Firepower Management Center). I have FMC set up locally at Hilton Head Island, South Carolina. I am wanting to manage al...
Forum Posts
FTD setup through both cli & FMCInterface 1 conf:5 sub-interfaces, each interface is VLAN ID + SubintID = 10,20,30,40,50IP: 192.168.10.10, 192.168.20.10 etc SW Setup CLI:Interface 9:Switchport mode trunkswitchport trunk allowed vlan 10,20,30,40,50 In...
Hi,I have a 4115 FTD at datacenter. Traffic from several locations passes through the firewall. These are connected through IPVPN and IPsec VPN to access resources in the datacenter ca.5000+ clients. Customer want NGFW features activated on the firew...
Resolved! Cisco ASA - RAVPN IPSEC not working
Hello Guys, @balaji.bandi @Marvin Rhoads @Rob Ingram @Scott Fella @Vikas Saxena @nkarthikeyan I configured the RAVPN ikev1 IPsec using an old client on the firewall but it's not working. I tried the same configuration and it works fine.I get the ...
This topic is a chance to clarify your questions about Firepower Migration Tool and its capabilities. Cisco Firepower Migration Tool is a free software image used for migration from Adaptive Security Appliance (ASA) 8.4 or later, Check Point (r75-r77...
HiWe have several site to site vpns on our new FTD devices i have noticed that if traffic (DNS) originates from the remote 3rd party side of the vpn it gets blocked, e.g servers on the remote end need to hit our DC's so the servers are initiating the...
Resolved! FPR1010 Port Forwarding
Hi Guys, Again new to the FirePower software, but been using the ASDM for years.I am having trouble getting my head around the NAT setup. Simply, let us say I have a web server (for test, it is actually a Fluke analyser) listening on port 80 on the i...
Hello Guys, @Mohammed al Baqari @balaji.bandi @Rob Ingram @Marvin Rhoads I am planning to update firmware from 9.9 to 9.12.3.12 including ASDM 7.14(1). I already upload both images to both unites.I will update the standby firewall first and boot i...
Hello Everyone.... I am working on a configuration template for rolling a large amount (greater than 50) of ASA 5545X using 9.13(1) software. I am having a difficult time getting two Network Objects into an Object Group.I am able to successfully crea...
Hi I have customer who lost connectivity to various severs for 20 minutes a few days ago. Looking in the logs at the time of the issue the following was seen: %ASA-4-733100 [ Scanning] drop rate-2 exceeded. Current burst rate is 0 per second, max co...
Resolved! ASA OSPF routing scale
Hi all I am trying to confirm the maximum OSPF routing table size for the below firewalls. Any ideas where I can find the info ? All in multiple context mode FPR9K-SM-36 – asa ver 9.8(1) 5585x – SSP40 - asa ver 9.8(4)25 FPR4K-SM-12 - asa ver 9...
Hello Guys, Need help on troubleshooting the ssh from outside(WAN) interface, I attached the config below. Please advice with commands for troubleshooting. Thanks, Result of the command: "sh run": SavedResult of the command: "sh run": Saved:ASA Versi...
Currently in our environment we have ~100 ASA's that are all being backed up through Solarwinds: NCM. Within NCM we use a TACACS+ account that acts as a service account to access these devices, and the backups are pulled nightly, and saved. There wa...
I was wondering if anyone had a breakout of each vulnerability to command CLI or ASDM to prove that the ASA meets or can meet the check? Note: to view the STIG you can go to https://iase.disa.mil and download STIGviewer 2.8 to read the STIG. Than...
Hello Everyone... We are running ASA 5545X with 9.14 / 7.14. Under Configuration>Site-to-Site VPN>Advanced>Tunnel Groups We are getting a strange name of a Tunnel Group : "0.0.0.2"Nowhere in our configuration does it call out for it and it appears t...
