I need to setup HA pair with 4100 series FTD firewall.What is the fail over cable requirements for HA setup? Can I use normal LAN cable?My Inside and Outside interfaces are 10Gbps interfaces.
Forum Posts
Greetings everyone, I've fixed this before but now I'm running into a different type of an issue. My firewall isn't booting to the image so I have to keep reloading the image onto the ASA. Any help would be appreciated. Also my Config-Register is set...
recently uploaded a SSL certificate(wildcard) on ASA Firewall issued by DigiCert. I got one SSL certificate , Intermediate CA and TrustedRoot certificate. As far as I know, SSL certificate to function, Server ( in this case ASA) needs a private key ...
I have a simple setup:Firepower Management Center is managing 1 Firepower 1010 device. I want to know if there is a way in the event of a power loss on the device can the FMC initiate a shutdown to prevent bricking the device from a hard shutdown? M...
I have two pairs of ASA5555-X running in Active/Standby configuration. One of the steps in the upgrade process is to "Launch ASDM on the standby unit by connecting to the standby IP address." I can't connect to either standby unit in either pair usin...
Resolved! ASA 5516 VPN on two or mor interfaces
HelloI'm stuck with vpn config on ASA and hope someone of you will be able to help me Problem description: I would like to establish 2 vpn connections, vpn1 via "outside" interface and vpn2 via other interface named "vpn2"For now I can see that ASA ...
Hi, we have issue of block uploads for gmail and other public sites onedrive, dropbox, facebook,linkedin etcI have followed below steps but its not working , I can see Do not decrypt in Connection events and ssl certificate on browser is not detected...
If I create a rule that Fastpath's for example: Szone: INSIDEDzone: OUTSIDES: ANY 1.1.1.1 Does return traffic from 1.1.1.1 to what initiates the connection get Fastpathed or do you need another rule to Fastpath the reverse traffic? Is that true for U...
Resolved! ASA asa912-k8.bin Image
Good evening everyone, I need some help on an issue I'm running into. Currently, the image on my ASA 5510 Firewall is gone. The image I had before was asa912-k8.bin and it's gone even on the backup I had just in case this happened. I contacted Cisco ...
Hello,If I SSH directly to my Firepower, I can run the following command :> show vpn-sessiondb summary --------------------------------------------------------------------------- VPN Session Summary ---------------------------------------------------...
Resolved! Cisco ASA 5545X Error Message
Hello All, I am getting an error message in the CLI : "MAC decrypt: MAC length error" We are running ASA 9.14(1) Error repeats itself approximately 3-4 minutes...
Resolved! ASA rule check
Hi All, Before applying any new firewall rule (source, destination, port) is there any way , i mean a show command in ASA to check whether rule is already permitted or denied by ACL ? Regards, Muhammed
Does anyone know of any ACL tool (preferably freeware) that will allow you to load an ACL and run an IP against it to see what line (if any) it hits? I have seen tools that allow you to manage ACLs, but haven't ran across anything that computes the l...
On the ASA and FWSM, is there a way to check which ACE would be blocking a particular traffic? I'm looking for a command where I just tell it which ACL is use and feed it the source-ip/port and dest-ip/port.Thank you in advanced.Vince
Hi All, Is there a way to export/import VPNs to a higher model FMC x500 from FMC 1000. Is there any chance of impact on the VPNs while we remove the FTD from Device manager in FMC lower model and then add it again in FMC x500 model. Can there be any ...
