Greetings, Is it possible to have a medium deployment with one node-1 set with PAN Primary and MNT Secondary and the node-2 with PAN Secondary and MNT Primary ?. To load balance load. Regards,Edouard.
Forum Posts
Hi everyone I need a little help with NAT on FTDI'v been searching since yesterday but I had no luck finding some infosWhat is the correct way to populate the configuration form for this scenario? Please see attached imagesFigure 8 Static NAT with P...
Hello can someone please help me understand this live log from cisco ise OverviewEvent 5400 Authentication failedUsername host/DESKTOP-QEDO10MEndpoint Id 70:5A:0F:2A:47:DEEndpoint ProfileAuthentication Policy WiredAuthorization Policy WiredAuthorizat...
Hi, Guys My event dashboard is full of low priority intrusion drop events which covers high priority events, what can i do to reduce the low priority events? Thanks!
Hi Guys,Anyone noticed here that the show port-channel summary is gone in the CLI either in LINA or FTD CLI in FP21xx?Is there a new command to check port channel status? thanks
From the presentation BRKSEC-2020I am kind of confusedAre they talking about distributed(interchassis on stackwise or VPC) src-dst-mixed-ip-port hashing on LACP for load balancing?!First of all I am using Catalyst 9500 and it's not included on this s...
Resolved! Firepower GeoBlocking Not Working
I have China geo-blocked, both as a source and destination (separate rules of course), yet still see Intrusion Event blocks for traffic originating in China. Is this working as designed? The intrusion event based block is based on a malware signatu...
Hello, I want to ask about Firepower default root password for IOS version 6.4.0 ?
I uploaded the ISO to a SCP enabled server. When attempting to re-image the Firepower Device (8130), I put in the IP address, authorized user name for the SCP server, full path to the ISO image directory (/home/username), and password for the usernam...
Resolved! VTIs between ASAs
Hello all, I have 2 ASA connected with a similar configuration than the attached file. If I need to connect, let´s say, 10 more ASAs between them (full mesh). What is the easiest way to do it? I have to create new tunnel-group and a interface for eac...
Resolved! Anyconnect SSL client uses IPSec?
I am trying to setup an AnyConnect SSL VPN connection and receiving an IPsec error? The error I am getting is:"The IPsec VPN was terminated due to an authentication failure or timeout"The Group policy that I am using has only SSL AnyConnect checked ...
I am simply trying to remove the last light (highlighted in bold), but can't figure out how to do it... access-list outside_1_cryptomap extended permit ip object-group Dupont object-group MECaccess-list inside_access_in extended permit ip object-grou...
Hello, I know that QoS is supported for routed interfaces on Firepower Threat Defense devices only.There is a way or workaround to limit de bandwith use of Youtube, Facebook, for example, in a rule in the FMC administering the SFR module of ASA with ...
What is the cost of a cyber vision license? Do you only need one for a network? Or one per IC3000 switch?
Resolved! Cisco ASA5510 Network Speed is half
Hello, Can anyone assist me with see why I only get half the Network Speed on my ASA. I have 1GIG Internet and I can only get 500 Mbps or less when using the ASA5510. Is this a license issue or something? I changed the speed to AUTO/AUTO or FULL/FULL...
