Hello Guys I am kind of New to Cisco ASA. I Used to configure VPN tunnels in Checkpoint, but there used to be Only one PSK.With Cisco 9.8 ASA Code you can put two PSK's for local and remote. I understood how these two PSK's work with bi-directional a...
Forum Posts
Resolved! FMC Licensing
Hello,First post here and I'm hoping someone can provide a bit of guidance.I've searched around and discussed with my peers and we all seem to have conflicting information around the FMC licensing. I have a customer who currently has 2 5525X's with ...
Resolved! URL Filtering Update
Our Firepower is setup and working correctly for Application blocking, but the URL blocking isnt working.The Firepower can download updates successfully for firmware updates but under the Intergration option, the URL Filtering shows Last URL Filterin...
Resolved! cisco asa HA failover link
Hi,I have one interface Eth2 for failover link (statless) and another interface Eth3 stateful failover.If I remove the failover link Eth2 OR stateful lin Eth3 from Active firewall, will it failover to Standby ?From the cisco document, i read that, fa...
Hi All, I have a customer converting from ASA to FTD. We are using the Migration Tool to convert the 4000 Access Rules and NAT's, and I am importing all the objects using the REST API. However, the REST API does not support adding routes at the momen...
Hi allA question to the lucky few who have access to the Cisco development schedule: Is there any talk of allowing policy routing to be supported in the FMC GUI other than using Flexconfig? RegardsFredrik
Resolved! WAN Firewall and Network Security
I am entirely new to Cisco hardware and am slowly learning how to configure things via console. I have a 2911 running IOS 15.7.3. It's stock configuration with 3 GigabitEthernet interfaces. I also have a 4948 Switch. What I am wanting to do currently...
What is the latest ASA version?
Folks, We have a couple of Nexus devices and IOS devices on very recent codes. However we have a network vunerability scanner that keeps alerting us on the following: 1) Deprecated SSH Cryptographic settings2) SSH Server Public Key t...
Cisco 1941-SEC / K9 IOS 15.2 (2) T1 router R1(config)#crypto isakmp policy 10R1(config-isakmp)#encryption ?3des Three key triple DESaes AES - Advanced Encryption Standarddes DES - Data Encryption Standard (56 bit keys).What is their operation encrypt...
Resolved! Categories list from FMC
Hi Community Team Does anyone know, if it is possible to get the Categories and apps list from FMC?, is avaiable to download or copy in somewhere or from FMC? I can't copy them directly Thanks
Resolved! ASA swap over issue
I have an ASA 5516 that is having intermittent issues so is being swapped over. I have taken a backup of the main ASA via ADSM and have restored onto the replacement device.I was just expecting to be able to just swap over the ASAs and reboot the swi...
Dear allI have a quick question for Firepower 1010 ASA firewall: Does the outside interface E1/1 support VLSM IP address? They want to assign a static IPv4 address with /22 netmask (255.255.252.0) on Ethernet 1/1 (outside interface).I can’t find the...
Hi GuysLAN (inside) network - 192.168.10.0/24WAN (outside)network - for eg 137.14.191.12/28Device: Cisco Firepower 2100 series managed by vFMC I have around 15 servers residing inside the campus that needs to be opened for public. Each server has dif...
Hi, We have two Firepower 4110 units that only have 2 logical interfaces. One is from a Gigamon tap and configured as a passive interfaces and the other is the management interface. We are using these units essentially as out of band IDS units. They ...
