Network Security

Resolved! vASA, are subinterfaces supported ?

Simple one, I'm configuring a vASA for the first time ever !! and not really a cisco Engineer to conduct a quick bit of Lab work between a Cisco and Juniper SRX ( vpn issues ) .I can create a interface on the inside of the ASA and ping it, but if I c...

Resolved! ASA NATing doesn't seem to work

i have ASA 5510 firewall and Fortigate is connected to vlan interface in ASA. I have public IP address NATed (object NAT) to the outside interface of the Fortigate. the NAT doesn't seems to work, I see the traffic hitting the public IP address but no...

Policy Based L2L VPN MTU and MSS config

Hi Experts,We are facing some issue on what I think is caused by fragmentation.After doing a packet capture on the network, we noticed that we are receiving multiple Dup ACKs, Re-transmissions and TLS Ignored Unknown Record。Multiple applications are ...

Resolved! Alternative for Redundant Interface on FirePOWER

Hi, I have FirePOWER 2100 but I am using ASA code. I am migrating from ASA 5510 to FIrePOWER 2100.In the previous setup, with ASA 5510, I have Redundant interfaces configured, but the FirePOWER 2100 does not support this kind of interfaces.What can ...

Firepower 1140

hello to everyone , it is possible to configure 4 wan pppoe interfaces in a load balance mode in a firepower 1140 ? Thanks in advanced!

ASA 5505 7.2 to 9.1

I just received an asa 5505 back on warranty and it came with software release 7.2. They no longer offer downloads for anything under 9.0. Anyone see a problem with upgrading from 7.2 to 9.1 as long as I don't have a config to migrate over?

Unable to install new certificate.

I am unable to install the new certificate even though the old certificate have been deleted.The deleted certificate is still in use even though I can not see it. It is the certificate to be redirected when you are using guest wifi. ISE 2.6Installed ...

Cisco ASA 9.8.4 and Cisco ASA 5512-X

Hi Everyone, Just wondering if you know what the minimum memory requirement is for running version code 9.8.4. Is 4GB enough on the Cisco ASA 5512-X? Thank you!

Resolved! ASA 5585-X (ASA5585-SSP-40) maximum SSL VPN throughput

I am not sure where you see the throughput for SSL VPN.I found that it does not have the same throughput as 3DES/AES IPsec VPN Here we can se that it got 3Gbps for 3DES/AES IPsec VPNhttps://www.cisco.com/c/en/us/products/collateral/security/asa-5500-...

ASA, Passive FTP (Explicit FTP with TLS) does not work.

Hi,I am having issues to make work a passive FTP server with explicit TLS encryption because ASA is blocking the response on a random port, even when I have enabled this configuration:access-list ftp-list extended permit tcp any any gt 1000!class-map...

ASA 5516 / FirePower - Restricted packets showing as allowed

Hi, When checking firepower dashboard, saw a number of connection events that should have been dropped were showing as "would have been dropped" indicating the packets were allowed to flow when they shouldn't have. I'll attach screen shots of a few o...

Cisco ASA 5525 - higher cpu usage since update 9.12(3)12

On 13th of May we updated our Cisco ASA 5525 Cluster from 9.10(1)17 to 9.12(3)12.Today I saw in our PRTG monitoring, that the cpu usage is know on 29-33 % during the night, when it was 3-5% before the update. The CPU usage raised exactly at the momen...

Resolved! Firepower 9300 security module quantity

HelloWe want to purchase firepower P/N:FPR9K-FTD-BUN with P/N:FPR9K-SM-56= as security module. I could find information about one and three security module in the firepower9300 data sheet but there isn’t information about two security modules.Do we h...

Resolved! ASA Failover - Hostname issue

Hi All,I have failover configured between two ASA 5515. I am a bit rusty with ASA..years since I played with one.Anyways, failover seems to be working ok. The only problem I have is that the failover unit keeps changing the name everytime I reboot th...

Firepower 1140 Threat Defence

Hello to everyone, Recently we bought a firepower 1140 threat Defence and i am wondering if i am able to confirure an outside interface with PPPoE. i perfromed the initial configuration and also i dont know how to configure that. i am not able to ch...

Network Security

Forum Posts

Resolved! vASA, are subinterfaces supported ?

Resolved! ASA NATing doesn't seem to work

Policy Based L2L VPN MTU and MSS config

Resolved! Alternative for Redundant Interface on FirePOWER

Firepower 1140

ASA 5505 7.2 to 9.1

Unable to install new certificate.

Cisco ASA 9.8.4 and Cisco ASA 5512-X

Resolved! ASA 5585-X (ASA5585-SSP-40) maximum SSL VPN throughput

ASA, Passive FTP (Explicit FTP with TLS) does not work.

ASA 5516 / FirePower - Restricted packets showing as allowed

Cisco ASA 5525 - higher cpu usage since update 9.12(3)12

Resolved! Firepower 9300 security module quantity

Resolved! ASA Failover - Hostname issue

Firepower 1140 Threat Defence

Unable to edit and save a text object

CSCwo71835 - The NAS-IP-Address attribute is missing

FMC API to get real time VPN/S2S tunnel and CPU/Memory perf metrics

Firepower 2130 -how to resolve plugin 70658 SSH Server CBC Mode Cipher

Yubikey for authentication to protected applications on FTD

SSH with X509v3 certificates

FPR‑4145 EOL/EOS ?

Firepower 4125 - how to resolve plugin 157288,

Cisco FMC QoS filtered by application

Disable checking of SIP traffic on FTD via FMC