Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...
Forum Posts
Hi guys, I am starting to study for CCIE security and trying to install the FTD virtual appliances. No matter what I try or what version I use it always crashes. IT goes through the installation and gets to a certain point and displays an error abou...
Resolved! Cisco ASA Stateful Failover
Hi Team, Greetings for the day...!!! I have two below questions for Cisco ASA & Cisco NGFW stateful fail-over. (1) Stateful fail-over in Cisco ASA also replicates all live entries of VPN (Site-to-Site IPSec and Remote-Access VPN) along with Xlates/C...
Hi All, I am trying to ssh and launch ASDM for management IP of ASA. I have ASA with SFR Module. (SFR Module is using mgmt0/0 port for communication, no ip assigned physically on interface and port is connected to management vlan as access , works f...
Hi All, I need to Migrate the FTD 2140 Standalone device and 2110 HA Pair FTD devices to new FMC. We are running 6.4.0.4 on the FMC and the FTD's.As I understand and read, We have a Migration process in 6.5 wherein we can move all sensors & FTD's new...
Hi Experts,ASA configuration guide lists both "user-identity domain" and "user-identity default-domain" in relations to a single identity-firewall configuration, often with same "nickname" and "NETBIOS_name" respectively, (IMO) without clarifying the...
I am having an issue pinging through my ASA. I am able to ping from my outside interface on the ASA to the internet and from my client pc (on the inside network) to the (inside) port on the ASA, but can not go through. ISP gateway - 192.168.1.254 /24...
Good Morning Team,I have ASA 5555-X on Version 9.1(1) I wish to upgrade it to the latest version. I can't get my head round the upgrade path. Can anyone please advice? Thank you
Greetings -I was wondering if there was a way to programmatically access the prefilter policies/rules via the REST API. I don't necessarily need to write to the database - a simple GET to the prefilter table and rules will suffice.The REST documentat...
Hi,What may cause firewall lost its running configurations on loss of power? I am unable to save the running configurations on the flash disk if that is the reason. Anyone had similar experiences can share useful input?
Customer has East-West server-to-server TCP connection which must stay up for 12 hours. I found where to adjust the TCP session timers: that works. However, where can I adjust the NAT timeouts so xlate also stays up for 12 hours (don't want to use...
Hi all, We are using AnyConnect on Cisco ASA, but we use the gateway on core switch instead of ASA.I'm curious to know does ASA perform RPF check even it's not the next hop for the traffic? Because I've confirmed the traffic is pass on packet tracer,...
Hello, I require to allow *.database.windows.net.on 1433 port from one Private Subnet . In my Firewall there is URL Filtering License. But URL Filtering does not help me here as Destination port is 1433. Is there any that I can allow this link as ...
Hello, I have been looking at the CIPB website and want to figure out the best way to block Russia, India, China, Iran, basically all non North American IPs. Has anyone done this on a ASA? If so how did you accomplish it? I also have a 3750G I coul...
Resolved! Firepower management center
Hi all, I am planning on deploying FTDs in all my branch offices. I also have a number of ASA-x deployed and I currently manage them individually via ASDM. Reason I am leaning towards FTDs and not more ASAs in the environment is simply because AS...
Need to allow remote peer to RDP my Server. We need not access their devices.Successfully established an IKEv1 VPN tunnel between two ASA. Private IP of Server is Translated to public IP and sent over the VPN tunnel. The remote user is able to ping m...
