Hi there,i am using Cisco ASA 5520, i am facing an issue, when i am giving IP address on client machine and DNS of 8.8.8.8 in the DNS part then users are able to access the internet, but when i am removing that DNS 8.8.8.8 then users are not able to ...
Forum Posts
Hello Community, I'm struggling to configure the LDAPS on the Firepower Manager Chassis to secure the access to the chassis.from the documentation, it seems that I have to enable the SSL on LDAP configuration and then install the CA from the cli as ...
I know FTD can block traffic based on Application and/or port. So, I could create one ACP rule to block TCP 22 and/or I could also create a ACP Rule for blocking SSH and OpenSSH traffic. Question: Is there a way to block, let's say SSH when it tunne...
ASA Remote VPN (Ipsec) users connecting from home. ASA is authenticated to AAA servers. Anyway to achieve the below.If user1 connects via anyconnect ASA should send authentication request too AAA server 1If user2 connects via anyconnect ASA should se...
Resolved! Cisco ASA WAN bandwidth monitoring
Hello Guys,@balaji.bandi @Rob Ingram @Aref Alsouqi @Marius Gunnerud Is there a way I can monitor the real time bandwidth usage for Cisco ASA WAN or LAN interface ? Also, it there any open-source syslog server available where ASA can export all t...
Resolved! What if FTD loses connection to FMC?
Since there is no way to manage FTD other than through FMC, what if for some reason; say if incorrect configuration is pushed that broke connectivity between FTD and FMC, how do I access FTD? How do I revert configuration?
Hi everyone, when I run the "show failover" command on active/standby setup, I get the serial number for both host and mate units.will I get both serials on active/active setup ??? I notice it does not appear on some google examples.If it is differ...
Dear community, I am attempting to bring two identical FMC2500 appliances into an HA pair. They came together ok, but for some reason the standby FMC is having issues bringing in one of my 2 FTD 2140 devices, it registered one of them ok, but not the...
i have a fmc with 2 years old ips rules , is there a risk if update the ips rules and applied them to a production environment?
I have 10 ASAs with different versions and ASDMs. It was running nicely until last week. some of them can be accessed from ASDM launcher 1.8 with ASDM (7.8(2)) for the ASA version (9.8(2)).The rest open through ASDM launcher 1.5 with ASDM (7.2(2)) ...
Greetings, Is it possible to have a medium deployment with one node-1 set with PAN Primary and MNT Secondary and the node-2 with PAN Secondary and MNT Primary ?. To load balance load. Regards,Edouard.
Hi everyone I need a little help with NAT on FTDI'v been searching since yesterday but I had no luck finding some infosWhat is the correct way to populate the configuration form for this scenario? Please see attached imagesFigure 8 Static NAT with P...
Hello can someone please help me understand this live log from cisco ise OverviewEvent 5400 Authentication failedUsername host/DESKTOP-QEDO10MEndpoint Id 70:5A:0F:2A:47:DEEndpoint ProfileAuthentication Policy WiredAuthorization Policy WiredAuthorizat...
Hi, Guys My event dashboard is full of low priority intrusion drop events which covers high priority events, what can i do to reduce the low priority events? Thanks!
Hi Guys,Anyone noticed here that the show port-channel summary is gone in the CLI either in LINA or FTD CLI in FP21xx?Is there a new command to check port channel status? thanks
