Hi all, I have 2 questions I hope you could help me with. We have a 2 nodes active/passive ASA setup (ASA 5525 running OS 9.9(2)), it used to run stable but now for some reason every night at the same time there is a failover happening. 1.It's always...
Hi,I am trying to capture encrypted traffic between two MACsec enabled switches (manual mode), I put the secured interfaces as a source but I can see clear test capture even though I can see that the links are secured.I am using 6504 switches with WS...
i try to implement the following configuration:1. branch - CISCO891-PCI-K9, c890-universalk9-mz.157-3.M6.bin2. branch has 2 ISP uplinks3. HQ has 2 terminating gateways4. each branch by using 2 loopbacks create 4 tunnels for redundancy:tu1: Loopback1 ...
We have 2 ASA 5516 w/firepower setup in Active/Passive mode. Every 2 days or so the firewalls become inaccessible. We cant get to them internally, internet access is blocked and all incoming VPN traffic is blocked. If we reboot the firewalls they c...
Hi, We are planning to implement 2-factor authentication for administrators managing the firewalls. Can we authenticate the FMC administrator with 2-factor authentication. Couldn't find any documenation or configuration examples around it. Vaibhav
Good Evening.. We are needing to restore our Active ASA to an earlier date in an Active / Failover setup. They are both ASA 5545X's running ASA 9.14(1). What are the best practices in doing so? We have one folink between the two ASA's. Should we disa...
Hello!We have Cisco ASA5508X with FTD on site. Twice in one month happened, tha ASA suddenly stops passing traffic. When the reload command is issued, it starts working for a few seconds then reloads itself. After reload works normally. I didn't find...
Hi Can anyone tell me which version of code is the best to go from 9.6.14 on my ASA5545 that addresses all the latest vulnerabilities?And can I go straight to that release from my current version.CheersCarl
Hi,I am having some problems on FMC regarding the population of the username field. On FMC, Analysis > Users > Active Sessions the column Username is being populated with the information provided by the integration of the Microsoft AD and Cisco ISE-P...
Hi!I 'am developing about getting SourceFire info.I wanna find JSON server in SourceFire because I have to get vulnerability fixes information.Can I get vulnerability fix info in the other way ,not JSON?
Hi,We have a project where we need to configure many FTDs who's configurations will be almost identical other than MGMT IP, interface IPs and hostnames. The LAN subnets to be used in NAT and ACP policies will differ slightly too.The FTDs will be FMC ...
Hi everyone, I want to ask that , is there a way to force VPN Client of Firepower Firewall always connect VPN everytime VPN client on user machine detect that computer have Internet connection. If not enable the option "Always connect", then it canno...
Cordial saludo, Se ha reportado desde la administración de firewall que hay solicitudes SSH de un nodo ISE a diferentes usuarios de la red (diferentes usurarios en diferentes subredes- este trafico por política es denegado), Hay alguna característic...
Can the Cisco ASA 5525-X be configured with 2 ISP's? Could I use two Cisco ASA 5525-X's and then configure each one with 2 ISP connections for fail over?
Good day. Please tell me how to transfer the database to HA mode on standby FMC.log from standby FMC /var/log/syncd.log Config database is not in HA. at /usr/local/sf/lib/perl/5.10.1/SF/Synchronize/HADC.pm line 3765.Config database is not in HA. at /...
