I'm wondering whether anyone has some suggestions on resolving an issue that cropped up when upgrading a lab FMCv from 6.5 to the newest 6.6. Everything (policy, etc) seems to have upgraded smoothly, but post-upgrade, it appears that URL Filtering/Cl...
Forum Posts
Guys, I have been trying to monitor ipsec tunnel peer IP and bandwidth utilization for few of our ipsec tunnel, upon doing some some research i could find below OID for the same. it wors seamlessly on single context mode, howver its not woking on mul...
I am having an issue where when I try and use the Quarantine DAP both my main DAP and the Quarantine Policy is getting useddynamic-access-policy-record VPN-IT-USERS network-acl IT-ALLOWpriority 4 its looking for users withing an AD group plus at leas...
Hi All, Over two years ago we replaced an aging ASA 5550 with a Palo Alto PA-5050. Palo Alto had a nice conversion tool that I was able to use to migrate the config from our ASA to the PA. Fast forward two years, and long story short, the Palo Alto...
ASR1k drops all incoming ESP packets. Feature: FIA_TRACE Entry : 0x70014590 - IPV4_INPUT_IPSEC_TUNNEL_FORUS Lapsed time: 2240 ns Feature: IPSec Action : DECRYPT SA Handle : 2415 SPI : 0x16329982 Peer Addr : x.x.x.x ...
Resolved! VPN ASA 2110 clustering
Hello, I currently have a 2110 running ASA image. It's used for AnyConnect only. I have 1 arm on the outside(connected through a L2 switch) and 1 arm on the inside (connected through a L2 switch). I bought another 2110 and plan to put ASA image on...
Hi We are on 9.8 and using remote access VPN for clients in split tunnel mode. The issue we are having is after connecting to the any connect client, our Windows DNS is being populated with two IP's for each PC - the local home network IP and the VP...
Hi,I have an ASA 5515, config looks like this:All inside IP'a are translated to outside. I'm able to ping everything in the Internet and also the host located in DMZ 111.111.111.11 but I'm unable to ping host translated in DMZ (111.111.111.111)Nat s...
Hi,I have internal dns server which is natted to public ip and dns permitted from inside . I am getting lot of traffic . it is psossible to limit the traffic (inspect dns are in place ) Thanks
Resolved! Firepower FMC log analysis DNS results
Isn't there a way to see what the FQDN is within a DNS request? I have seen some DNS requests to an unexpected external DNS server and I would like to find out what the FQDN was that it sent the request to but I can't seem to find any report or way t...
Hello we have a pair of ASA 5515-X firewalls.VPN works fine however on Linux, no matter what we do it will still add the iptables rules.We have disabled the client firewall in ASDM, but it's still being added.We even tried adding a script on connect ...
I have 2 Firepower 4100 Boxes and i would like to build a logical FTD Active Standby HA on them.. want to confirm on a few points as mentioned below : I can select any interface on the chassis to function as Management for FTDs..provided it is in the...
Hello All, We are using Cisco ASA 5585-X for many years however we are facing a lot issues with a stable version of the software image presently we are using Version 9.4(4)20 however present software have seemed to be a bug as memory utilization is...
Hello, we are implementing a RAVPN solution with Firepower and the scenario is:-We have a x.x.x.x/30 for RAVPN solution-Firepower Outisde interface is using private address y.y.y.y/30 and is connected to a Internet Router inside interface-Internet Ro...
Hi, I edited the default policy for ikev2 ( it is done for ipsec site to site vpn policy )The below is before editing crypto ikev2 policy 1encryption aes-256integrity shagroup 5prf shalifetime seconds 86400 and the below is after editing crypto ik...
