Hello, We are planing to add another ISP and run it as a backup link, using IP SLA and tracking. The backup link is mainly for Remote Access VPN. I am aware of the concept of configuring a backup interface and use a floating static route, but I want ...
Forum Posts
Resolved! Routing between ASA 5510 interfaces
Hi Guys I have Cisco ASA 5510 at one of our sitesi have an issue with this asa, the servers at inside zone with 100 level security can`t reach to the outside zone level zerowhen i try to ping from the server, it can reach to the inside interface ( hi...
Hi all, I need some help about this case. My customer have a Firewall ASA5506 . As I know, A Protection (L-ASA5506-TA=) license is automatically included (along with a Control license).So can I show it or view it for my customer so they can know that...
Good day, We have ASA cluster, routing is symmetrical, so whatever traffic leaves through the master F/W it returns through the same firewall, same with the slave.. According to my limited understanding to how cluster works (I'm network guy not a sec...
Dear all, I work for a Big company that uses your system. I use SQL servers for sql on a daily basis but when I’m connected to Cisco Anyconmect I’m rejected every time. I have two questions: 1- can I do something ( server side) so that the VPN recog...
Hello, I set up Anyconnect VPN on 5525. The Anyconnect users can ping to any internal networks but, he cannot ping the user on the same subnet with Anyconnect.The subnet for Anyconnet is 10.0.0.0/24, the subnet for internal is 192.168.0.0/24. 10.0.0....
Hello! We have Cisco ASA 5525 in Failover mode (Active/Passive) (SW 9.2.2.4), 4 RDP Servers based on WinServer 2012R2(Serv_Net sec level 50), PCs connected to ASA (PC_Net, sec level 50) and uplink to Corporate Networks (CORP_NET, sec level 0). When w...
Hello people i am trying to license my new FPR-2130 (for SSHv2) with Smart Software Licensing. However, when I look at the license details this appears: Smart Licensing Status ====================== Smart Licensing is ENABLED Registration: Stat...
I recently came back from implementing my 12th Cisco FTD 1010 device to a remote site and this one was a bear. The outside interface would not come up no matter what I did. No link lights, but the FMC showed the port was enabled, but down. We called ...
Resolved! Firejumper validation ETA
Good day, I would like to find out how long does it normally take for Cisco to respond to a validation request?In need of doing stage 3 validation. Regards.
Resolved! How to mirror switch logs
Can anyone suggest how you would mirror the logs of your switch without turning on both TX and RX (so not to generate duplicate entries) ?I am monitoring RX packets which doesn't include the local switch logs, which I want to capture also !
Hello every one,I set up vpn site to site and its work fine so by default the internet is not allowed because only allowed tunneled traffic.if this correct??so if I want to allow users in my site A to use only one website like us yahoo.com and also k...
Hi All, I've got the RMA unit ASA5506 (both same ASA Version 9.6(1)), I've replace this unit to the failed primary in HA pair with following step.1.setup the failover interfaceinterface GigabitEthernet1/8description LAN/STATE Failover Interface!failo...
Resolved! Logical Devices Vs Multiple Context
What would be the difference between deploying two Logical Devices inside of a same FP 9300 box vs just having two context on a single Logical Device? What can you do with Multiple Logical Devices that you can't do with Multiple Context? Thx a lot
I am trying to SSH to a new spoke office served by Comcast. The device at the spoke is an ISR 1111 and should become part of my DMVPN. But the immediate issue is I can't SSH to the thing. I can ping it. But nmap shows now reply from inside my main ne...
