Hi Experts,ASA configuration guide lists both "user-identity domain" and "user-identity default-domain" in relations to a single identity-firewall configuration, often with same "nickname" and "NETBIOS_name" respectively, (IMO) without clarifying the...
Forum Posts
I am having an issue pinging through my ASA. I am able to ping from my outside interface on the ASA to the internet and from my client pc (on the inside network) to the (inside) port on the ASA, but can not go through. ISP gateway - 192.168.1.254 /24...
Good Morning Team,I have ASA 5555-X on Version 9.1(1) I wish to upgrade it to the latest version. I can't get my head round the upgrade path. Can anyone please advice? Thank you
Greetings -I was wondering if there was a way to programmatically access the prefilter policies/rules via the REST API. I don't necessarily need to write to the database - a simple GET to the prefilter table and rules will suffice.The REST documentat...
Hi,What may cause firewall lost its running configurations on loss of power? I am unable to save the running configurations on the flash disk if that is the reason. Anyone had similar experiences can share useful input?
Customer has East-West server-to-server TCP connection which must stay up for 12 hours. I found where to adjust the TCP session timers: that works. However, where can I adjust the NAT timeouts so xlate also stays up for 12 hours (don't want to use...
Hi all, We are using AnyConnect on Cisco ASA, but we use the gateway on core switch instead of ASA.I'm curious to know does ASA perform RPF check even it's not the next hop for the traffic? Because I've confirmed the traffic is pass on packet tracer,...
Hello, I require to allow *.database.windows.net.on 1433 port from one Private Subnet . In my Firewall there is URL Filtering License. But URL Filtering does not help me here as Destination port is 1433. Is there any that I can allow this link as ...
Hello, I have been looking at the CIPB website and want to figure out the best way to block Russia, India, China, Iran, basically all non North American IPs. Has anyone done this on a ASA? If so how did you accomplish it? I also have a 3750G I coul...
Resolved! Firepower management center
Hi all, I am planning on deploying FTDs in all my branch offices. I also have a number of ASA-x deployed and I currently manage them individually via ASDM. Reason I am leaning towards FTDs and not more ASAs in the environment is simply because AS...
Need to allow remote peer to RDP my Server. We need not access their devices.Successfully established an IKEv1 VPN tunnel between two ASA. Private IP of Server is Translated to public IP and sent over the VPN tunnel. The remote user is able to ping m...
Hello all,I have configured 3 separate vlans using sub-interface on ASA firewall with 3 different security levels. And configured trunk with a layer-2 switch allowing all vlans to that trunk port. See the below information for your better understandi...
I am looking to upgrade to a Cisco Firepower 1140 firewall but the added cost of having all three Threat Defense Licenses makes it pretty expensive as it increases the cost of the solution by almost double. I am wondering if we dont go for the additi...
Hi Everyone, We are using a shared Cisco ASA firewall that is managed by an external ISP. I'm trying to get my head around the confusing terminology for the outbound and inbound interfaces that have ACL permit rules as follows: OUTBOUNDcompany_out ap...
Hello Team, Could you please help me to find an answer:Is it possible to configure Remote Access Vpn on Cisco FTD Virtual Appliance?If yes , what is the maximum numbre of simultaneous sessions?Thank you very much for your answer. Best regards,
