Hello,I have created a new context in cisco ASA5525 and configured site to site VPN in context. Phase -1 is not coming up and i am getting the below messages while running debug. We have a tunnel configured to same peer IP from a diffrent location h...
hi,due to the recent ASA CVE alert, i need to do an upgrade 9.4 > 9.8.https://tools.cisco.com/security/center/viewErp.x?alertId=ERP-73830 just want to confirm that i can upgrade directly 9.4 > 9.8 as per link below:https://www.cisco.com/c/en/us/td/do...
We are hosting a web page and it can be viewed internally by it's private IP (192.168.42.4). It can be viewed externally when using our public IP address. However it cannot be loaded internally by using the external IP. It asks to log in (to the rout...
Hi ,I have an ASA 5506x and need to throttle down the download link (upload as well but later).I have tried the QoS policing feature using both input/output and ASA does police but the link is unusable - pings keep dropping when I just open a website...
Hello There! I implemented the CSM early this week, and we are configuring the authentication process, we have a tacacs+ server running on ISE the authentication and authorization policies have been configured and our domain accounts are able to auth...
So this is not primary about ASA, but I have the same question on an ASA,I have never worked with a Cisco RV325 in the past, there is this feature inside of the port forwarding menu that you can forward ports 1~65535....If we do that, how can the ove...
Folks, I'm working through the guide found here: https://www.cisco.com/c/en/us/td/docs/security/asa/asa914/configuration/general/asa-914-general-config/ha-failover-cloud.html#id_53631 When trying to contact tools.cisco.com (to license the ASAv) it ap...
Hello,I 'm trying to work out the configuration to provide HA (Active/Standby) between two FTDs running on two FPR4120 to a pair of ASR1002 routers. Each router has a link to each of the FPR4120s. The FTDs are running as routed. EIGRP is will be r...
From the FMC / System / Updates - For Sensor patches and also FMC patches, do I need to install them one at a time or can I install the latest one only which will cover all patches beforehand? E.G Lets us assume that for a sensor I have available - 6...
Hi,I have ASA 5555-X running IOS Version 9.12(3)12. I have 2 Syslog servers. I want to send debug messages to one of the servers but only specific messages to the second server as it has limited capacity. Does anyone have an idea on how should i filt...
Hi I have Cisco 2911 and iOS version 15.0(1)m7Site A and B. Both side site public IP is dynamic. I would like to know is it possible to configure VPN between them. If it's possible please explain what kind of vpn is suitable.Thank you
Hi, Is it possible to download self-signed certificate from cisco IOS router to update on a computer.We are trying to stop warning messages pop-up while connecting to anyconnect VPN client.
Hi,ASA Software Version 9.1(7)23Cisco ASA 5520We ran a test for our VPN firewall on Qualys website and it showed some week configuration points. i.e. TLS1.2 is not enable TLS1.0 is enable. I understand TLS1.2 is not supported in this version.Under t...
I have an ASA (9.6.3) with two interfaces connected to the Internet. The ASA default route is pointing to ISP A and I have PAT and NAT using ISP A working fine. I have a route-map using PBR that sets default next hop for certain clients to ISP B. ...
Hi Experts,CLI Reference for "icmp" command states "The icmp command controls ICMP traffic that terminates on any ASA interface." As I read it, this is filtering on ingress (ie. incoming ICMP message).But this example in same document throws me off:T...
