Hi,I've the FirePower1010 versions 6.5.0.2.There are several interfaces:- Ethernet 1/2 with address 192.168.24.245 and is belong by inside_zone- Ethernet 1/4 with address 192.168.23.245 and is belong by video_zone But I cann't ping 192.168.23.245 fro...
Hello, Today i was configuring 802.1X in Cisco 3650 with ios version 3.7.05E, before i configure 802.1X in this same model but in ios version 16.9. When i copy all configuration my device was no authenticatech when i using "show access-session" i se...
HiI am trying to figure out what would be the best security level for management0/0 interface on my ASA firewall ? Currently I configured it with security level 100 but I am not sure if this is the best security practice so if anyone can help me on t...
Hello, i have two cisco C3650, in one of them i was configure sucessful 802.1x but in second i want use IBNS 2.0, im create tempalte for dot1x but when i configure port and restart then i have always this same information about cred fail. I'm using w...
Hi All,We have both Active / Standby Cisco FPR-2110 Firewalls which are constantly using high memory. Free memory: 1902561200 bytes (27%)Used memory: 5059307600 bytes (73%)------------- ------------------Total memory: 6961868800 bytes (100%)Note: Fre...
Hello everyone, I need to create over 100 network/host objects in FMC. I'm trying to do through the Rest API.I have succeeded to create a network object but still not succeeded with host object.I have used the example from Cisco Devnet Firepower tuto...
Hello Team,Is there any script or CLI command to check how much memory particular access list consumes ? There are ACLs which are consuming high memory on the firewall and we need to search those rules. Cisco Firepower 2110 Threat Defense
So I entered the following to more harden the device but now I get "Unable to launch ASDM from ..." error.Does anyone know what the workaround is so I can keep these same versions?I entered:asa(config)# ssl server-version tlsv1.2asa(config)# ssl clie...
Hi everyone, i am unable to enter in Rommon mode in ASA 5508-x because of password recovery functionality is disabled .kindly help me out
So our Primary firewall failed and our Secondary ASA is our active unit. We just received our replacement ASA. I just want to verify these are the steps to introduce the Primary ASA back into the HA setup. Currently, our Secondary unit (Active un...
ciscoasa# show run: Saved:: : Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz:ASA Version 9.2(4)27!hostname ciscoasainterface Ethernet0/0description to externalswitchport access vlan 2!interface Ethernet0/1description to internal!interface Ethernet0...
Can anyone point to a python sample script where this can be achieved? or at least part of it, just need something to get me started.Via the CLI on the ASA there are multiple ways to go about it. I usually do:1 - sh access-list <name> | I 1.2.3.42 - ...
hi,quick question, does the IP address for doing dynamic PAT has to be in the same subnet as the ASA "outside" interface?see sample below. we control the routing for the "outside" network which integrates with a partner network. interface GigabitEthe...
Hi,our customer have to install in our infrastructure 2 server and 2 switch L2. Their switch should connect to our switch L2/L3SoCustomer Server-->Customer Layer2 Switch-->ISP L2/L3 switch-->ISP RouterOn ISP L2/L3 switch we configure vlan and we have...
Hello there,I have in my lab a FMCv (6.2.3.4) and a ASA5506 running FTD software.However FMC is showing that there is a deploy in an ASA5515X, that doesn't exist. How can I remove that ghost deployment? I have already seen this problem before in a cu...
