Hello everyone. The switch is configured to log in through the ISE. After updating from 16.9 to 16.12 the switch, authentication failed. There are no logs on the ISE when logging in with any account.If you connect with a local account, then enter the...
Forum Posts
Dear friends,I have done failover for firewalls umpteen number of times but yesterday it failed for some reason.I had replaced the failed primary unit with a fresh one and i had expected that it will detect the secondary unit as active and try to beg...
Hello, I have a system of 2 FTD in HA managed by FMC.The version of the FTD is 6.4.0The version of the FMC was 6.4.0.9, and now I upgraded to 6.6.0 The issue I have is that some URL do not show the correct reputation, so they are not displayed at al...
hi,i've got an 5525x running as anyconnect RA VPN and it's using anyconnect 4.1 image for windows.there's no more 4.1 pre-deploy/installer for windows in the cisco download site and i only got 4.8.will the 4.8 work when connecting to the VPN GW and t...
Resolved! 4120 firepower running ASA image
We have deployed a cisco asa image on a firepower 4120 chassis. Now we are creating port-channels on the ASA. But, we are unable to associate the port-channel to a phy interface. The channel-group command is not there. ie: Firewall# sho run interfa...
Hi All , I try to find the information about SCTP and GTP with firepower 2130 (ASA Appliance) but I not found the information . Please advise me for my concern .
Ok would like some help have added my access list yet even with my IP deny rules I can still access each vlan by typing from one vlan the IP addresses of computers on the other vlan and bang bang bang up come all the shares erh?? how can this be ??...
ok I have an ASA 5506x router set up with various vlansI have various pc's on the vlans and an out side connection I have have set up NAT for various service and set up the firewall access lists to prevent communication to different vlans unles I e...
Hello, I am trying to configure an ASA5525 and it's not allowing me to assign an IP address to the interfaces. These are al the options I get in interface config mode.
We don't want to send all our traffic to IPS hence I was looking for options where I can deploy the same device as IPS for some critical data and IDS for other traffic. Some of my friends say firepower can send tcp resets even when its configured as ...
I have a client with a FP2110 that was ordered with ASA mode. They also ordered FMC and were intending to configure Firepower services on the FP2110 with ASA similar to how it would have been with an old ASA running FP services. I can't figure out ...
Hello all. We have a customer who upgraded the FMC upgraded from 6.6.0 to 6.6.1 successfully.Ithen to upgrade the FTDs from 6.4.0 to 6.6.0 but hit an error which states Update to install failed. we are both new to FTD, whereabouts can we see more det...
Resolved! FTD 1010 cant ping between ports
So this is a LAN setup & using GUI but can also use cli if needed.Ive been troubleshooting this for a few days and I think FTD is blocking the access between the port 3 and port 1.Here´s the setup: Host - 192.168.3.5/24FTD Port 3 - routed status - 19...
Hi, Is there a way to filter logging output to a specific interface on the Cisco ASA ASDM? I have tried the ASDM Logging Filter under Monitoring->Logging->Real Time Log Viewer However with this tool you can only define limited parameters like "Source...
HI, I am using ASA5516-FPWR-K9 firewall since 7 or 8 months. I used to run "Updates" from ASDM and update worked fine. Last week I run the same process but it returned following error...Error: Download Updates Failed: Peer certificate cannot be authe...
