I have attached a simple setup that I cannot get to work with real equipment. I used packet tracer as more of an illustration to explain the problem but it works in packet tracer. The equipment is not avail in packet tracer so I labeled what I have a...
Forum Posts
Hello,Not able to bind my certified signing request. And I have already imported my root cert under trusted certificates.
Is anyone using TA-eStreamer 3.6.8 with Splunk Enterprise Security? Although the add-on says it's CIM 4.x compatible we're not seeing any of the cisco:estreamer:data sourcetype matching data models. Looking at the add-on it doesn't have any tags.conf...
Keep in mind that this is an FTD managed by FMC, so mostly all config was Pre-Deployed by myself using GPO in the backend.SBL is working fine but it's picking my "Mgmt Tunnel VPN" Profile, which is the incorrect one. How does SBL choose the Profile? ...
Hi I need to install ISE in attached USB drive because the drive c is not big enough. vmware workstation is used as platform in my drive c. but during i install the ISE and let ISE install in the USB drive(500G), I got error message, which tells the ...
Hi, Is there any way I can change management address of a virtual FMC without first remove the FTD from the FMC and then re-register the FTD after I changed the IP address?The issue is that the customer already have VPN tunnels configured and there i...
Hi,I have a mixture of ASA5506-x, 5515-x and 5525-x in my environment.The 5506-x firepower version is limited to 6.2.3.16.There ASA5515-x and 5525-x can go up to 6.4.x version.All these devices are currently managed by a centralized FMC and I would l...
Hey all. We're experiencing difficulty allowing traffic from our outside web server's public IP to our internal SQL server on a specific port, on our 10.10.10.1 private network. We have web services for our customers to use that interface through IIS...
Hi Tech guys, in my Internet edge deployment, My FTD (21110) is behind the ASR1000 Router(Internet Gateway). I want to allow any connect vpn clients to establish vpn connection to FTD via NAT Configured on ASR1000. From the Firewall perspective, I...
Resolved! Fire Power IPS License issue
I have a ASA 5515-X Firewall. I have also installed 'sfr module' onto the firewall. I purchased a FirePower IPS License (L-ASA551-TA-1Y). But after download the License file I saw that, this was (Control+Protection) License. I just little worried, is...
Resolved! Cannot input data from AD to ISE
HI I want to input data from Active Directory to ISE. Now I notice the issue is both ISE and AD cannot integrate well. Please see the picture below. The correct domain is abcd.local, but what i can see is ISE1.ise1.com instead of ISE1.abcd.local. Can...
Resolved! Cannot access FTD management Interface
In my lab, I previously had my FTD management interface on the same subnet as my inside network. The inside network is using the FTD Inside interface as gateway and everything was working without any issues. I recently created a separate management n...
I just started with an organization that did an ASA to Firepower conversion and then significantly modified and updated the Firepower configuration. The Firepower is not yet in production. Looking at the history of the ASA (a 5520), I think ages ago ...
Resolved! ASA 5555 Multible Vlan Access
I have an ASA 5555 and can access the internet thru it just fine if I am on the same network as the inside interface but when I add a next-hop to my test router to have another vlan access the same firewall, the traffic never makes it to the internet...
Hi Guys, Im pretty new to Cisco and im setting up an ASA 5506-x for the first time. I am not able to communicate between the sub interfaces on my ASA. Everything else is working fine. I have 3 sub interfaces: 1.vlan 10 (10.0.10.1/24) 2.vlan 50 (10.0...
