Hello, I would like to know the meaning of these words (P0/P2) in an ASA capture: CISCOASA# capture TOTO interface Guest real-time4: 11:04:48.898055 802.1Q vlan#XXXX P2 172.22.X.X.50336 > X.X.X.X.53: udp 395: 11:04:48.908034 802.1Q vlan#XXXX P0 172.2...
Hello, I am trying to integrate FMC with AD in order to be able to set up RA VPN. I have created the user agent in the FMC. I have installed the agent on a server and in the agent I have configured the AD and it is connected. When I try to add the F...
Earlier this year, we purchased some ASAv virtual appliances with an SWSS service contract. The service contract lists the instance number in place of the serial number on CCW-R. The serial numbers on the VMs are not associated with a Service Contr...
I have two identical ASA 5585 working in Active/Active. On Primary Unit i want to changefailover group 1 secondaryfailover group 2 preempttofailover group 1 primaryfailover group 2 primary After configuring this change;spyker/pri/act# conf tspyke...
Hi,Is it possible to send capacity reporting like cpu utilizaton and interface utilization monthly in an automated way to an email etc ?
Hi ,I would like to ask about reverse flows error. I saw the same issue in forum and try to fix. But May be i don't know how to add NAT Exemption rule or my exemption rule is doesn't work.vSo please help me to fix.My network information :inside-net=2...
Hi folks, I have a customer who owns a FPR4140-NGFW-K9 with just the factory 8 port 10GB network module.Due to budget constraints, they want to upgrade with an additional 1 GB 8 port module and move some cables over from the original.Can be the HA po...
Hello Guys @balaji.bandi @Rob Ingram I have separate interface with separate subnet for Guest WIFI and it only has internet access. Guest WIFI is using Public DNS servers. It is resolving to the Public IP which is mapped to internal IP of Exchang...
Dears, we need to block http website or application brute force attack using FTD , is it possible ?
I have 2 Nexus 7702 with F4 line cards and need to encrypt the traffic between them. Im getting this error when I applied config on the N7702 ports name (config-if-cts-manual)# sap pmk 0xxxxxxxxx00000000000000000000000000000000000000000000000000000...
Hello, I am not able to use the user name and password created by a sponsor in Cisco ISE.Also before i log in i can still access the internet but i cant access ISE. Please help.
I'm running 6.6.0-90 on a FPR1120 in FDM mode. Whether or not I use the default NTP servers or enter my own, the unit will not sync up. When I run 'show ntp' the status of each server (including 127.127.1.1) shows unknown. From the CLI console, I als...
Hi, We took over a system that didnt keep the greatest of notes on the system. I'm in a situation where we don't know the Tunnel group key or the Failover key. Is there any way to get these keys without taking the system down? Thanks for any help!
Hi everyone, im trying to find out how to specifically permit source ip going to destination. Im using Packet Tracer. It is working when I use this command,access-list 100 extended permit tcp any anyaccess-list 100 extended permit icmp any anyaccess-...
Hi all I have FTD 2130 version 6.2.3.2 , I'm facing that server trace e.g. 8.8.8.8 always show * I had read many articles , I had tried 1. set policy from outside to inside allow icmp all 2. add flexconfig with policy-map global_policy ...
