I have been writing some scripts for FXOS installation. I have them done, but can't figure out a character if one exists that tells the OS to ignore the rest of the line (comment lines). In ASA or IOS it is the "!" and in Linux it is the "#". Or m...
Forum Posts
Does the NCS 520 support NAT?
Hi, I have tried to find information about licensing on new N520 with no success.Could someone clarify which ports are enabled by default and what is the difference between Metro Access and IP Access tech packages? Thanks in advance
Hi all, i have on FMC the snmp configuration i add all the info like read community listen port 161 trap port 162 and the hosts, everything is ok we see all the traps but i dont see any interface on our monitoring tool, have someone an idea? the FTDs...
We have been assigned a new routed IP subnet by our ISP in addition to the exiting one. This /29 subnet needs to be added to the FirePower appliance so we can then use it for additional NATs to be defined.I cant find any documentation on this and don...
Resolved! Cisco ASA 5512X NAT in OpenVPN server
I have an OpenVPN server in my Servers-LAN with UDP port 1194 openedI only have 1 public IPI want external client to connect to this OpenVPN server. I configured ACL to allow udp port 1194 in outside interface. And configured NAT in object network. B...
I tried to create a ACL which was configured as source zone and destination zone both outside with a source IP as my public IP action deny, but once applied, I can still access the VPN signin page. Is there a way to block access to remote VPN from sp...
Resolved! FTP Access through Cisco ASA
Hi, Do you have any idea on how to make files visible on FTP server when accessing from outside? FTP does not display files when I access it using the public IP. But when accessing it locally the files are listed. I already created access rules enabl...
Resolved! ASA 5525-X Hardware Specs Clarification
I have a 5525-X Running in production and I have a couple clarification questions:1.) Quad Core: Only ever see a single core with load2.) Memory: Shows 8GB but only shows 4GB (I can only assume that 4GB is used as system member and the other half ram...
Hello, I am wanting to set an access rule in my default policy that blocks traffic from certain geolocations. If I block traffic sourced by these geolocations to "any" will it drop web traffic initiated by my internal users? I know that returning tra...
Resolved! ISE evaluation licenses expiring
We recently upgraded our production 2.0 instance to 2.7 and are in the middle of getting a Security EA license which will encompass our ISE solution and were advised to hold off until it is completed. Problem is, our license dates are set for the en...
Resolved! Slow upload speeds with a Cisco ASA 5516
Hello,We have a Cisco Firewall ASA 5516. We also have a 1GB up/down internet circuit. Behind the firewall we do not receive asymmetrical speeds. We receive Approx 900 down and 50 up. In front of the firewall we receive 900up/900down consistently. We ...
Hi, We are having issues after upgrading FMC and FTD to version 6.6.1.Active VPN sessions are not being updated and unable to logout users.Less than usual event are seen. any ideas?RegardsThomas
Hello everyone, I have a problem on a ASA 5505.I want to preclude the version 1 of SNMP.First i tried the command "snmp deny version 1" but it didn't work.________________________Then, i tried this configuration : (config)#snmp-map nov1here(config-sn...
Hi, I have been looking at the FXOS chassis manager APIs but I could not find any information regarding updating the access list via fxos api ? https://developer.cisco.com/docs/cisco-firepower-chassis-manager-rest-api-reference/ Can someone help m...
