Network Security

Resolved! How I have to proceed on Fire Jumper Program Essential: Stage 2 FY 19

Hi support!I recent pass "Security - Systems Engineers - Essentials - Stage 1 FY19 (PARTNER ONLY)" but I do not known how can I proceed to the Stage 2.Thanks for your time

asa 5506-x , firepower /var is almost full

Hello! There are no backups, no old updates: /dev/vda7 38G 35G 675M 99% /var What can I remove to clean up some space? Thank you!

Cisco ASA5505 upgrade from 8.2(5) but interim 8.4(5) not available for download

Hi, I have a Cisco ASA5505 with old software 8.2(5) and i would like to update it, but the interim 8.4(5) is not available for download. Any idea? Can I go straight to 9.2.(4) or can I download the interim 8.4(5) from somewhere else? Please advise

Resolved! customer getting new public ip and routed to inside network through isp?

customer needs a free public ip for Cisco jabber , the problem he is out of free public ip on his outside interface range , is it possible for him to buy a public ip address from another range and let the isp point any traffic for this new public ip ...

ASA-4-405101: Unable to Pre-allocate H225 Call Signalling Connection for faddr

I am starting to see these messages on our firewall and it's dropping some Avaya connections. We are not low on memory nor we are doing NAT as these are internal firewalls only so I don't think the description from Cisco is valid for us. There are ar...

East - West Traffic for FTD

Hi Guys,Just want to check with you if it is possible to block east-west traffic in FTD? Those endpoints which are within the same VLAN or network.Thanks

ASA IPsec remote access VPN - limit number of auth retries

Is there a way to limit the number of retries a VPN user has to authenticate? I found the aaa local authentication attempts max-fail command but our ra VPN uses certificates for authetication so I am not sure if the max-fail command would work.

SLA Monitor on CISCO ASA

Hello team, What if we want to monitor a destination which is reachable through a Site to Site VPN? I have configured it by using the inside interface to source it, but unfortunately this is not working. Below my config: sla monitor 20type echo proto...

Resolved! FMC, 6.3.0 disable SSL hardware acceleration.

HI, I saw that in FMC, 6.3.0 it's recommended to disable SSL hardware acceleration. nevertheless , i did not find how to do it . I think I should use command : ssl-hw-offload disable on FTD directly. But it's not accepted, on which CLI menu s...

Multiple ASA Reloads

I am going to log a tac case the next time it happens, but I have had four ASAs reboot twice today at the same time, in different Data Centres. Crashinfo files are in the flash, but just wanted to see if anyone has seen this before? Note they are on...

ASA 5508-X DRAM

Hey everyone,I was wondering if anyone knows the DRAM specs for the ASA 5508-X firewall. I'm getting a solid amber light under the status light and I am suspecting a RAM issue. I made the mistake to not have an active service contract, and I'm curre...

Renew ASA Certificate

My current Identity certificate expires in a couple of weeks. How do I renew the cert using ASDM? I don't see an option to just upload the renewed PEM file. It appears that I have to add a new cert in PKCS12 format, is this correct? The Cisco ironpor...

how to enable command "show running-config" to an user privilege 5 in user mode

Good day everyone, Please assist me with the reference issue. I am trying to enable the reference commando to a read-only user privilege 5 but haven't gotten success. i've tried privilege exec level 5 show running-config / privilege exec all level 5 ...

Resolved! ASA 5505 IP Sla monitor configuration

Hi all, I need to configure redundant paths with static routing. I have two ASA Firewalls 5505 with ASA version 8.2(5). I want to know if these Firewalls ASA versions support IP Sla monitor configuration to have redundant routes, in my case the prima...