Hello, I have a Cisco ASA configuration : HA- Active/Standby.As soon as I set up standby, I lose the ssh connection. This is because the management interface is overwritten by the synchronization of the configuration with the 'Active'.Can you help me...
Forum Posts
Resolved! UPGRADE ASA 5525 AND 5515
Hi, Someone would you help me?There are differents between Cisco ASA 5525, 5515 with 5515-x, 5525-x. Because I need to upgrade these fws by a new release, but in the Cisco Page I just found information about 5515-x, 5525-x. I guess that they are end-...
HiI am getting a bit confused with the term "ISE Device Administration via TACACS" and what it actually means. Is it possible to use TACACS to authenticate ISE system administrators? I.E. If more that one person has the authority to perform ISE syste...
Hello, Using FTD Version 6.5.0.4 on FPR2110, and managed with FMC. I am trying to access SNMP in LINA via the inside data interface, and it is being denied.The sanitized packet capture below shows an output-interface of "NP Identity Ifc", which I und...
I'm posting this to find out if anyone else has experienced this problem and to notify others of a possible bug that can shut your Firepower connection down. This is the third time now that the Outside port of our Firepower Suite has disconnected f...
I am trying to connect to a provider over the internet. The call comes up, but no audio. Per the provider my router is modifying the SIP SDP info to be the IP of the PAT address on the router instead of the 1 to 1 NAT. I have tried turning SIP inspec...
Dear all. I configured IPS on firepower and configured it to send me email when it is being triggered. I configured it on Policy-Action->Alert->Intrusion Email. All IPS rules has been selected. Approximately two days later of configuring IPS notifica...
Hi, we are running virtual ISE PIC on demo License but now need to license it with permanent. Is there any SKU , I need to provide to Cisco and How many License I needs as Its talking to AD for passive authentication and FMC to share user to IP mappi...
Hi, I have console and management (eth0 port which is labeled as '1') connections to 2 FMC 1000 devices. I am working on getting these configured. I can get to the console connections for both. However the management connection on device 1 takes me ...
Subinterface was configured on Portchannel interface of FTD device. When I trying to remove it I getERROR: Remove failover mac address configured on this sub-interface firstFound this bug CSCvo58030. The problem is I don't have any failover mac addre...
Experts, Do you know how many split routes the client can support when asa and anyconnect do SSL VPN? A previous version had a limit of 200. How many can be supported after the upgrade has not been described in the documentation, please give pointers...
Resolved! Cisco ASA + NAT Configuration
I have Cisco ASA & below is the sequence of existing NAT. nat(inside,outside) source 1.1.1.1 2.2.2.1nat(inside,outside) source 1.1.1.2 2.2.2.2nat(inside,outside) source 1.1.1.3 2.2.2.3nat(inside,outside) source 1.1.1.4 2.2.2.4nat(inside,outside) sour...
I was just able to get vulnerability scanning for a vFMC suite with 2110's started and it's calling out the SSL Certificate cannot be trusted. This and a few others relating to the same thing. The FMC has a valid certificate, but the scans are pi...
Resolved! Allow Traffice Between VPN Users
Hi Experts, In order to be able to establish sofphone calls from one VPN user working from Home to another VPN user working from HOme too, I need to enable the traffic between VPN users. I have ASA 5515. My understanding is that I need to add a NATna...
