I'm running version 9.12(4)7 on ASA 5525. A scan of the firewall flagged the following vulnerability. TLS/SSL Server Supports The Use of Static Key Ciphers Any idea how this can be disabled? Thanks.
Forum Posts
Resolved! ftd full mesh vpn with backup lines
Hello is it possible to create full mesh vpn in ftd with backup lines ?
Hi Guys,My company bought a pair of Cisco c9300L with License Network Essential (limited OSPF-1000 Routes) replace for old C3750X. But old Cisco 3750X is running with 1300 routes OSPF. I dont know what it mean in "1000 routes OSPF". So i think i wil...
I have a Trustsec link established between 2 switches currently running cipher AES-128. when i do a show macsec on the interface it says that it supports AES-128 and AES-256. Is the support for 256 only when configuring MACSEC MKA or can 256 be confi...
Resolved! VTI on FTD as of 2020
Hi everyone, I saw this thread from 2019:https://community.cisco.com/t5/network-security/vti-on-ftd/td-p/3923610 regarding the VT Interfaces on FTD. Sadly I can't find any resource that confirms or denies that this implementation is possible. I have ...
Hello guys, im totally confused i need to understand something. so i have done wired user and machine authentication using eap chaining, why is it that when i remove anyconnect from the pc i am not able to authenticate either user or machine ?
Dear all,I have problem with SIP phones which are registered with their public IP on CUCM instead of private address assigned to AnyConnect client. (AnyConnect client for android v4.9, ASA with firepower module v9.8(4)) Now, SIP clients are successfu...
I'm in the process starting my first round of ASA to FTD device migrations and have concerns and questions regarding what to do with management interface on both during or for migration purposes.My current ASA is attached to Firepower Management Cent...
Hi,we are Using Firepower 1100-Series as ASA for VPN with AnyConnect.When A user loggs on to the Webinterface to download the AnyConnect Client there is a button on the lower right corner to show step by step Instructions to Install the client for th...
Hello Guys,can you help in the belowThere are no harddisks in my ASA 5585-X with FirePOWER SSP-60 . if i make IOS upgrade from rommon modeand i make a reboot it goes to rommon mode again . when i checked i found that the flash option (copy tftp flash...
Hello Guys, i really need support . i need to buy a HDD for cisco ASA 5585-X with FirePOWER SSP-60 , but i don't know if i need to buy a cisco HDD or some other vendor will work .is there any comparability matrix for the HDD that can be used with AS...
Hi Community, Cisco released note for FTD 6.3 has not officially included posture in this version, would this create an issue with future support assuming we successfully implement posture? Regards,
Resolved! VPN pool cannot ping inside interface
Hello Guys,I am setting up a cisco asa 5505 FW. I can get interent on the FW and i can connect to the vpn client fine and get a address from the vpn pool i created. The only issue is that i cannot reach the inside interface from the VPN pool. Can som...
Hello,we have cisco asa 5510 (asa version 9.0(3)) and we have purchase a cisco firepower 2130 (with image asa, no FTD).Is it possible to migrate the configuration currently present on a cisco asa 5510 direct to a cisco firepower 2130 with image asa ?...
Resolved! Firepower 2130 ASA config questions
Hi all, A couple of questions around configuring ASA on Firepower 2130, especially around port-channel and SSH access to ASA.I've followed this guide to configure both FXOS and ASA, but direct ssh access to ASA via management interface is still faili...
