Hi ,I would like to ask about reverse flows error. I saw the same issue in forum and try to fix. But May be i don't know how to add NAT Exemption rule or my exemption rule is doesn't work.vSo please help me to fix.My network information :inside-net=2...
Forum Posts
Hi folks, I have a customer who owns a FPR4140-NGFW-K9 with just the factory 8 port 10GB network module.Due to budget constraints, they want to upgrade with an additional 1 GB 8 port module and move some cables over from the original.Can be the HA po...
Hello Guys @balaji.bandi @Rob Ingram I have separate interface with separate subnet for Guest WIFI and it only has internet access. Guest WIFI is using Public DNS servers. It is resolving to the Public IP which is mapped to internal IP of Exchang...
Dears, we need to block http website or application brute force attack using FTD , is it possible ?
I have 2 Nexus 7702 with F4 line cards and need to encrypt the traffic between them. Im getting this error when I applied config on the N7702 ports name (config-if-cts-manual)# sap pmk 0xxxxxxxxx00000000000000000000000000000000000000000000000000000...
Hello, I am not able to use the user name and password created by a sponsor in Cisco ISE.Also before i log in i can still access the internet but i cant access ISE. Please help.
I'm running 6.6.0-90 on a FPR1120 in FDM mode. Whether or not I use the default NTP servers or enter my own, the unit will not sync up. When I run 'show ntp' the status of each server (including 127.127.1.1) shows unknown. From the CLI console, I als...
Hi, We took over a system that didnt keep the greatest of notes on the system. I'm in a situation where we don't know the Tunnel group key or the Failover key. Is there any way to get these keys without taking the system down? Thanks for any help!
Hi everyone, im trying to find out how to specifically permit source ip going to destination. Im using Packet Tracer. It is working when I use this command,access-list 100 extended permit tcp any anyaccess-list 100 extended permit icmp any anyaccess-...
Hi all I have FTD 2130 version 6.2.3.2 , I'm facing that server trace e.g. 8.8.8.8 always show * I had read many articles , I had tried 1. set policy from outside to inside allow icmp all 2. add flexconfig with policy-map global_policy ...
Resolved! Cisco FMC/FTD - Adding Bulk NAT or ACL
Team, Is there anyway i can add a lot of new NAT or ACL rules in Bulk?I have noticed that this is possible via the FMC API, but for a noob like me, the scripting, json, python etc doesnt make any sense. Is there a working example of how we can do th...
I have a asa 5505......and in the process of upgrading I have messed things up........When I connect to the 5505 through the console cable/port I am have to break the boot and go into a rommon #0>......so from here how to I simple reset the box to th...
If I have a firewall with no code on it and boot it into rommon mode, can I pull a code off a USB drive, or can I only do it by setting up TFTP parameters and then copying it down from TFTP server? thank you
Resolved! ASAv model id not updating
I was using ASAv with trial license, then purchased ASAv30 smart license. I can see from ASA CLi License mode: Smart Licensing ASAv Platform License State: Licensed Active entitlement: ASAv-STD-2G but the ASA model id still shows ASAv10Model Id: A...
Resolved! ASA 5506 Firepower Timezone
How do i change the timezone for the Firepower module ?It seems to default to New York, and i cant find any way to change this/Per Buch
