Cisco helped providers with Wi-Fi calling and then didn't give us guidance on how to open ports on Cisco ASA firewalls to support it. I opened a TAC case and they are clueless. Can someone get this to a product manager within Cisco to give us ASA g...
Forum Posts
Hello, Can you advise , is it possible to configure Cisco ASA side with Policy Based Site to Site VPN and AWS side Route Based VPN ? So far I know AWS does support only ROUTE based VPN.
Good day, Kindly assist with the latest feature comparison between FTD and ASA with firepower. Regards.
Hello, I trying out ISE device administration, wanted to restrict for a user to send command 'username', so below is how I set TACACS+ profile and command sets. TACACS+ profilepriv-lvl=4 command set But when I tried to login, command username succes...
Summary A vulnerability in the Secure Shell (SSH) server code of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload.The vulnerability is due to an internal state not being...
Hello all, I would need some suggestions regarding a configuration I would like to implement.Basically I want to create a New DMZ for a new Infrastructure we are setting up,new DMZ leg in the ASA.Let`s say this DMZ Subnet is configured on the Core Ro...
Is it possible to silence drop events from the IPS? I do not see a way in the policy, unless I am missing something. Looking for option 'drop (but DONT generate event).
We cannot connect from our different logical VLANs but can connect to inside and DMZ zone. Users on my different logical VLANs the (PSN) network cannot reach any of the other PSN network. inside and DMZ is ok they can reach them. This is already in...
Resolved! ASA 5505, Read-only filesystem
Hi!I was doing a change in m ASA5505 today, but when I was trying to save it to memory, I got the message"Building configuration...Cryptochecksum: xxxxxxxxxxx%Error opening disk0:/.private/startup-config (Read-only file system)Error executing command...
Hello Fellow Networks, I am encountering problems TCP:443 extracting a vFTD v 6.6.0 capture generated whilst in diagnostic-cli privileged EXEC Mode. vFTD http services have been stated allowing access from the appropriate subnet:ngfw1# sho running-...
I have a range of IP's which are assigned for Internet facing servers. I had already defined all of my HOME_NET in which I also included publicly addressable internal IPs which I would like to monitor. However I had not added these external facing ne...
Hello, can someone help me configure a whitelist on Firepower to only allow access to netflix. There's a built-in application filter for netflix's but I get an error.
I have a problem where DNS responses over IPv4 are getting dropped between my firewall and switch and are not getting back to the host. This is resulting in failed DNS lookups. Below is my network layout:The DNS standard query responses are getting d...
I have ASA 5585SSP40 one interface naming external and i have interface having zone116 ip address 10.26.X.X from interface external want to connect server 10.92.x.x but unable to connect and when i see in the logs it is showing like this Deny TCP (n...
Greetings, I've recently been tasked with making some of my servers FIPS-compliant. In the process I've run into a problem accessing my sg500x-48p switch via SSH. I get the following error: no matching key exchange method found. Their offer: diffie...
