Hi everyone, I cant seem to get this to work so here's some information about the network and what I need so hoping someone can guide me into configuring this correctly. I'm running ASA 5505 v9.2 ASDM v7.9inside interface: 10.2.1.1DMZ interface: 10.2...
Forum Posts
Hello there,I got an ASA 5508 which I recently configured to connect to AWS cloud via BGP (through the AWS direct connect). Now I simply need to ssh my inside interface from an IP in cloud but in the ASA I can see the message:Failed to locate egress ...
Here is what I mean, I have vFMC managing several FTDs and I have a parent ACP applied to all the FTD. Each FTD also has its own specific ACP rules. I also have site specific Prefilter to bypass the inspection for Site to Site traffic. The over ACP r...
Resolved! SSL Certificates for AnyConnect VPN
Hi guys, I'm a bit confused in why we would use two signed certificates for anyconnect VPN to establish a trust point on the outside interface of the firewall. If look at the below article and follow the steps, it would go like this. 1. Create a CS...
Hello All! We implemented a dhcp server on one of our subinterfaces "phone_subnet" and the default is 3600 seconds! Does anyone know the flexconfig command to increase the lease time? Thanks!I only have the default FDM, no FMC.
hi, can i deploy the AMP for Endpoints on a clients computer running Ubuntu ? thanks
Hi,I need a simple Answer please ...all release Notes tells us some DH groups not supported in FTD version 6.7 Please give me a simple answer: WHICH DH groups WILL support in FTD version 6.7 for IKE v1 and V2 for Phase 1 and 2 ???? thanks for your c...
Resolved! FTD Root access password ?
I have used Admin password to login to CLI on FTD's since they were built & can access expert mode. But just tried to run an upgrade readyness check at CLi & it says I don't have privilege so tried sudo to root & none of the passwords I have configur...
I have FTD1K running 6.6.1 (build 91) managed by FMC...From a user laptop inside network to run speedtest via speedtest.net in browser, I got about 150Mbps down and 1Mbps up...What I found is disabling the SSL policy on FTD improved dramatically on u...
Is Link State Propagation supported on Firepower 2100-series appliances?I find different statements in different parts of the documentation. As an example:Firepower Management Center Configuration Guide, Version 6.4 - Page 553 states:(revision First ...
Resolved! ASA 5512 Cipher text not updating in CLI
Migrating from one ASA 5512-X to another ASA 5512-X appliance. When applying same configuration the password cipher is not the same. What is the procedure to update the cipher text via CLI? from --> enable password ***** encrypted to --> ...
HI,I am getting error while deploying policy ,"Deployment failed due to timeout collecting policies and objects"FMC appliance -4500 - Version 6.4.0.9 CISCO Firepower 9300 FTD Version: 6.4.0.9 FXOS Version : 2.7.1.122I not able to deploy polices ,it t...
we are planning to upgrade our cisco ASA software, currently we have ASA modals (5525, 5545,5555) working on 9.12x and regarding services we have HA, VPN, NAT, in our environment, So please suggest which versions cisco suggest & which version cisco ...
I've deployed a new FMC VM on a new VMWare server and i have restored a backup from an old running FMC VM and every thing is going fine till i tried to register the smart license which took too long time with no success , there was an error from the ...
Resolved! FMCv 6.7 HTTPS certificate
Hi, all.I'm trying to import HTTPS certificate into FMCv running 6.7 code. I'm getting an 'Error Unable to verify certificate.'Steps I took with OpenSSL to generate the cert:Generated CSR from the FMCGet the CSR signed by the Internal CA.Tried to imp...
