This topic is a chance to clarify your questions about the best practices and required elements to migrate your Cisco Adaptive Security Appliance (ASA) to Firepower Threat Defense (FTD). Because of the continuous evolution of cybersecurity threats, i...
Hello Folks, I am having an issue were I am unable to access the 10.10.50.0/24 network when I am behind the 192.168.1.0 network. I have built a NAT statement for when I am accessing the 192.168.1.0 from the 10.10.50.0/24. However, when I try and acc...
I want to restrict AD specific user in my policy. in detail I want to create policy for some user in AD specific group can we use few users select or we can creat group in ise from ad selected users???
ASA5506 We changed primary providers to AT&T fiber and made changes to the g1/1 interface and also have a failover service on g1/5 and now no inside systems can utilize Internet traffic going through the g1/1 interface but everything works fine using...
Hi. I have an FTDv (6.2.2.81) and an ASA 5515-x FTD (same version) in my lab. On FMC both devices stuck on "Deployment" phase and I cannot cancel it. I managed to stop the ASA FTD and restart the FMC and now it shows "Failed in Deployment" but cannot...
Hello, I am having problems nating from DMVPN HUb router to outside interface. Topology = (router -> outside switch -> ASA FW 9.x version) I have been following the document https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Sep2017/CVD-IWANDepl...
Hello, I face a problem with FTD version 6.4.0I have previously disabled TLS 1.3 and http2 due to some sites not working. Recently I tried to block youtube from a category of users, but it was not possible. I put an access policy rule to block it. ...
Hi Team I am planning to solution for SPlit Tunneling and which are the URLs are part of external domains should be resolve the ISP DNS and corporate domains should be tunnel via ASA secure DNS server, How to configure ?
Hi all, I have 2 questions I hope you could help me with. We have a 2 nodes active/passive ASA setup (ASA 5525 running OS 9.9(2)), it used to run stable but now for some reason every night at the same time there is a failover happening. 1.It's always...
Hi,I am trying to capture encrypted traffic between two MACsec enabled switches (manual mode), I put the secured interfaces as a source but I can see clear test capture even though I can see that the links are secured.I am using 6504 switches with WS...
i try to implement the following configuration:1. branch - CISCO891-PCI-K9, c890-universalk9-mz.157-3.M6.bin2. branch has 2 ISP uplinks3. HQ has 2 terminating gateways4. each branch by using 2 loopbacks create 4 tunnels for redundancy:tu1: Loopback1 ...
We have 2 ASA 5516 w/firepower setup in Active/Passive mode. Every 2 days or so the firewalls become inaccessible. We cant get to them internally, internet access is blocked and all incoming VPN traffic is blocked. If we reboot the firewalls they c...
Hi, We are planning to implement 2-factor authentication for administrators managing the firewalls. Can we authenticate the FMC administrator with 2-factor authentication. Couldn't find any documenation or configuration examples around it. Vaibhav
Good Evening.. We are needing to restore our Active ASA to an earlier date in an Active / Failover setup. They are both ASA 5545X's running ASA 9.14(1). What are the best practices in doing so? We have one folink between the two ASA's. Should we disa...
Hello!We have Cisco ASA5508X with FTD on site. Twice in one month happened, tha ASA suddenly stops passing traffic. When the reload command is issued, it starts working for a few seconds then reloads itself. After reload works normally. I didn't find...
