Hi,Hope you guys can help me out. In my ASA we have a public segment that need to be advertised to a BGP peer. This public network will be used for NAT. I know that the network will only be advertised is there´s a valid route, assuming I do a rout...
Hi AllWith IKE V2I believe it still has a phase and phase 2 proposal (init and auth)On the ASA, is the ike policy the phase 1 and the ipsec proposal phase 2 for ike v2?cheers
out of the box setup using FDM and the client device or the management device dont get DNS.manually enter a DNS IP in the client NIC properties and DNS lookups work. I can browse the internet. The same applies for the device on the management port.ho...
Hello, is it possible to connect a new FTD to join as HA pair with a productive FTD? As far as I have seen for HA pair the both FTD should have no interface configuration before HA configuration. regardsSaimun
Hello Experst @balaji.bandi @Rob Ingram @Marvin Rhoads private IP: 10.10.10.10Public IP: 234.56.78.x I want to map Private IP to Public IP for Port 80 and 443 but need to limit to specific Public IPs. Please help me accomplishing that. Thanks,
This is the current asa config and it not working, I am not good in cisco firewall and my background is a checkpoint. please suggest me can I apply the below config. Current Config==============interface GigabitEthernet1/1nameif CORPsecurity-level 50...
When running ASA on Cisco Firepower 2100 series appliance. Default mode for 2100 is appliance mode, its like inbuilt FXOS. In 2100 ASA and FXOS operating systems share the same Management Interface.The query I have is around the the image and the har...
Hi All,I have separate bidirectional rules in my firewall (ASA 5545-X) for different applications (including VoIP). What is puzzling here is if i capture logs for the traffic coming from OUTSIDE (of firewall) back into the segmented environment i am ...
Hi all,-Cisco Firepower App for Splunk version 1.3.7-Cisco eStreamer eNcore for Splunk version 3.6.5We've successfully setup estreamer between Splunk and our FMC, when I search in the Splunk events forsourcetype="cisco:estreamer:data", I see thousand...
Hi, We are planning to upgrade a single 1 gig link to 2 X 1Gig link port-channel in FTD-2100 for Inside and Outside interfaces. Now when I try to add a port-channel it does not give me an option to add the existing interface. So does that Mean I need...
Hi Community, I am getting an error log on my CISCO ASA as below.%ASA-4-402123: CRYPTO: The ASA hardware accelerator encountered an error (Invalid PKCS Type, Pad, or Length, code= 0x1B) while executing the command PKCS1 v1.5 RSA Decrypt with CRT (0x2...
what is the difference between router cisco 2900 and 2901?
Hello, I upgraded CSM to 4.21 and the policies do not load. It stuck at 21/50. Do you know what logs to look at?Or what to look for? Thanks and regards, Konstantinos
Hi All, My employer requires that we have the ability to look back at a users web browsing history, whilst these requests are generally for sometime in the last 3-6 months, we are expected to be able to report out to 12 months. I am aware that you re...
Hello. I have an IPsec tunnel acting as a backup path for an internal (EIGRP) link on ASA. It will be triggered only if the internal link goes down and since traffic does not find any EIGRP route then it will be matched with the default route and bri...
