Hello There! I implemented the CSM early this week, and we are configuring the authentication process, we have a tacacs+ server running on ISE the authentication and authorization policies have been configured and our domain accounts are able to auth...
So this is not primary about ASA, but I have the same question on an ASA,I have never worked with a Cisco RV325 in the past, there is this feature inside of the port forwarding menu that you can forward ports 1~65535....If we do that, how can the ove...
Folks, I'm working through the guide found here: https://www.cisco.com/c/en/us/td/docs/security/asa/asa914/configuration/general/asa-914-general-config/ha-failover-cloud.html#id_53631 When trying to contact tools.cisco.com (to license the ASAv) it ap...
Hello,I 'm trying to work out the configuration to provide HA (Active/Standby) between two FTDs running on two FPR4120 to a pair of ASR1002 routers. Each router has a link to each of the FPR4120s. The FTDs are running as routed. EIGRP is will be r...
From the FMC / System / Updates - For Sensor patches and also FMC patches, do I need to install them one at a time or can I install the latest one only which will cover all patches beforehand? E.G Lets us assume that for a sensor I have available - 6...
Hi,I have ASA 5555-X running IOS Version 9.12(3)12. I have 2 Syslog servers. I want to send debug messages to one of the servers but only specific messages to the second server as it has limited capacity. Does anyone have an idea on how should i filt...
Hi I have Cisco 2911 and iOS version 15.0(1)m7Site A and B. Both side site public IP is dynamic. I would like to know is it possible to configure VPN between them. If it's possible please explain what kind of vpn is suitable.Thank you
Hi, Is it possible to download self-signed certificate from cisco IOS router to update on a computer.We are trying to stop warning messages pop-up while connecting to anyconnect VPN client.
Hi,ASA Software Version 9.1(7)23Cisco ASA 5520We ran a test for our VPN firewall on Qualys website and it showed some week configuration points. i.e. TLS1.2 is not enable TLS1.0 is enable. I understand TLS1.2 is not supported in this version.Under t...
I have an ASA (9.6.3) with two interfaces connected to the Internet. The ASA default route is pointing to ISP A and I have PAT and NAT using ISP A working fine. I have a route-map using PBR that sets default next hop for certain clients to ISP B. ...
Hi Experts,CLI Reference for "icmp" command states "The icmp command controls ICMP traffic that terminates on any ASA interface." As I read it, this is filtering on ingress (ie. incoming ICMP message).But this example in same document throws me off:T...
Hi all, My org is looking to implement a per-device or per-user client certificate to accompany uname/pw authentication in AnyConnect. Is it possible to do this in Firepower Management Center? We are interested in preventing our security from being c...
Hi,Has anyone had any issues with these rules allowing traffic they shouldn't be ? We've had this twice that we know of. The first time around someone added a rule that wasn't specific enough and didn't enable logging so there were lessons learned ...
My users are not very PC savy so when Firepower redirects them to the captive portal, sometimes they do not click continue to proceed to the portal (since its a untrusted https site), so i want to apply a internal trusted cert to it so it takes them ...
Greetings!I am currently working on securing a small business network. We have 2 RV340 routers connected together. Router 1 (R1) is connected to the modem and Router 2 (R2) is connected to R1's LAN port from R2's WAN port. The intent is to have R1 co...
