I am setting up a small network, like below. Two ASA firewalls are setup in Parallel to each other, one provides Anyconnect VPN and the other is the edge firewall. Both ASA outside and inside ports have proxy arp enabled and I can not disable them du...
Hello All, I have scenario that is totally new to me. I have a site with two FTD 2140 configured as and High Availability pair (Active, Standby), over FMC.The Primary/Active firewall connected to ISP-A and the Secondary/Standby firewall is connected ...
Hi all, I have a CDA which is integrated with AD and WSA successfully, but nothing is under Registered Devices tab.could anybody give me some suggestions? thanks
I have problems with the Firepower ASA syslogs messages are sent as UTC timestamps. I have set in FXOS the correct NTP servers and they are synchronized with the correct timezone for our country and the time is correct. # show clockThu Oct 8 11:45:10...
hi everyone A routing flow is asymmetric.A icmp request comes in another route.Then icmp reply goes to ASA.ASA forwards the packets from inside to inside by static routeI've used to tcp_state_bypass feature to clear this issue.But icmp isn't successf...
The hard limit of 150 anyconnect peers seems to have been decided by Cisco only to sell a more expensive model. The thoughput of the hardware should be the limitation and the choice to exceed the (by Cisco setup) limit should be the made by the end c...
Hi Guys Has anyone tried DMVPN between MX86W and ASR. Will be grateful for any advice on this. Regards Adrian.
I am having trouble with getting to my Ciscoasa CLI. It started with my ASDM password being expired. There was no warning of it being about to expire. I can't do a reset or forget password for ASDM. I tried to log in via console with my credentials b...
We have a 6509e as the core of our network. Connected to this are a pair of ASA 5585-Xs acting as a firewall. These are currently in an active/standby setup. Lately, in the mornings especially, we seem to be hitting the limit of how much traffic thes...
I'm setting up new FPR 1010 devices to replace end of life ASA 5506x.on the 5506 there was a place to define the domain name in DHCP for clients on the inside.the FPR1010 (managed locally) does not seem to give me a way to do this.is there any way I ...
Can you help me with this chart, what portion of the Appliance are they referring to by NGFW(next generation firewall), by NGFW I guess they mean FTDSo I mounted an ASA 9.12.3.12 on top of the FXOS(supervisor) 2.8(1.125), If I don't use the FTD or an...
Hello team, I am trying to upgrade a virtual FMC from version 6.2.3.6 to 6.4.0The upgrade seems to be stuck for like 5 hours in BEGIN 000_start/400_run_troubleshoot.sh From logs i get these:ui:[ 5%] Running script 000_start/109_check_HA_MDC_status.pl...
There are two questions.1. Can't I register for Smart license with EVA license??2. I have an APEX license. When the APEX license is registered on the device, will it be changed to something other than the EVA license when outputting'show version'? V...
I'm creating a post on this because I haven't necessarily found an answer that works. We have a remote web server that has to talk to our SQL server (on out internal network). Currently our external web server is on a different ISP, and is able to ta...
I'm trying to set up auth-proxy on a 3750 running 12.5(55). The config seems to proceed normally until I try to configure the interface itself. I get this:colo2-sw(config)#int vlan6colo2-sw(config-if)#ip auth-proxy PROX_NAME% This config is not suppo...
