Scenario: Several ASA's with SFR's managed by an FMC for one entity, with one policy deployed with various whitelists, URL rules, etc. We may want to transfer administrative ownership of only one ASA to another entity, along with a new FMC with just...
Forum Posts
I have an FMC1600 that manages 2 FTD 2210s. I also have an ASA 5516-X that is going to be used for VPN so we can use posturing. How do I configure the 5516 and connect it so that it communicates with the FMC/FTDs for Firewall protection and also have...
Hi.I would like to know if FTD can detect DDoS Attack in FMC's Intrusion Rule.I am not sure if it is correct because it is searched based on snort rule.======================Random Get FloodingSYN FloodingSYN (ECN, CWR) FloodingACK FloodingTCP Conne...
Hello, I have a issue with tacacs after I upgraded the cisco 9500 stackwise to code 16.12.2!The router doesn't accept the tacacs password but only local password. After authenticated with local password it goes to enable mode and accepts tacacs passw...
Hello,I need to convert the following configuration to ASA:nat (interconnection) 0 10.17.1.0 255.255.255.0nat (inside) 0 192.168.80.0 255.255.255.0nat (inside) 0 10.1.0.0 255.255.0.0could someone help ?Thanks
I am not able to run the Firepower MIgration tool 2.1.X on my windows 10 machine, I get the following error and the tool just exits.1.3 seems to work fine on the same platformAny help much appreciated.Thnx File "C:\Jenkins\Build_virtualenv\penv\lib\...
Hi I am using Cisco Firepower 2130 as an ASA mod. Could you please guide how can I enable SNMP in my firewall for the network monitoring tool. Thanks in advance
Resolved! Firepower 6.4 BGP extended community
Hi legends, I have been asked to replace my clients internet facing Palo Altos with Firepower. I have a couple 9300 FTDs and a 4600 FMC to achieve this. The client has a PE attached to their Palo Alto firewall with sub interfaces and each in its ow...
Hi , I'm running FMC on FTD 2100 and I have 2 VPN errors displaying on my 2 site-toSite VPN's that I can not undesrtand : Please see screenshots : Error 1 : VPN is inactive due to Idle Timeout Error 2 : VPN is inactive due to User Requested. ...
I need to setup HA pair with 4100 series FTD firewall.What is the fail over cable requirements for HA setup? Can I use normal LAN cable?My Inside and Outside interfaces are 10Gbps interfaces.
Greetings everyone, I've fixed this before but now I'm running into a different type of an issue. My firewall isn't booting to the image so I have to keep reloading the image onto the ASA. Any help would be appreciated. Also my Config-Register is set...
recently uploaded a SSL certificate(wildcard) on ASA Firewall issued by DigiCert. I got one SSL certificate , Intermediate CA and TrustedRoot certificate. As far as I know, SSL certificate to function, Server ( in this case ASA) needs a private key ...
I have a simple setup:Firepower Management Center is managing 1 Firepower 1010 device. I want to know if there is a way in the event of a power loss on the device can the FMC initiate a shutdown to prevent bricking the device from a hard shutdown? M...
I have two pairs of ASA5555-X running in Active/Standby configuration. One of the steps in the upgrade process is to "Launch ASDM on the standby unit by connecting to the standby IP address." I can't connect to either standby unit in either pair usin...
Resolved! ASA 5516 VPN on two or mor interfaces
HelloI'm stuck with vpn config on ASA and hope someone of you will be able to help me Problem description: I would like to establish 2 vpn connections, vpn1 via "outside" interface and vpn2 via other interface named "vpn2"For now I can see that ASA ...
