Hi ,Currently our DC Nexus 7K's use local authentication, we want to move this to TACACS+. We have done this with our Nexus 5k's without issue. Some background , we use mgmt0 for remote OOB access via the internet, when connecting internally we conne...
Forum Posts
HI alli deployed new virtual FTD V6.5 and do default route from inside to out side and can ping to 8.8.8.8 but cant open any web site can any one help me
Hi AllI need clarification on the following.For our Internet Access we have two firewalls in line as follows."Internet Router"---"FTD2110"---"Second FW"----"Internal-LansOn FTD our ACP policy Inbound rules "permits" specific destination IPs and ports...
Hi, i do have an ASA 5585X Cluster (clustermode) with four members and need to increase the mtu-size of the clusterlink to 1600.jumbo-frame reservation ist already configured.is the change of the mtu size disruptive or non-disruptive? can i do this c...
Hi All,As you may or may not be aware there is a limit of 10000 entry's in the "File List" specifically used for uploading SHA's.Does anyone know a way around this ?Like many people we use this a lot as we manually upload txt files with SHAs in that ...
I need to know what is the maximum fo ACE (ACL entries) into the Firepower 2100. Could someone help me?
HiI've previously had problems with 5512-Xs running ASA having an ACE limit of 100K. Is ACE a relevant limit for 5516-Xs running FTD 6.4.0.4? What about FTD 2110? I've read somewhere the limit is 200K for ASA 5516-X running ASA code but nothing speci...
Hi Team Quick question please , if I have a customer running ASAv and they want to run service reflection , is this supported , I cant find it anywhere in the config guides ? Thank you Julia
Hi,I am facing an issue with URL filtering vs IP Address filtering rules, as the title suggests. Let me elaborate more on the issue:We are using ASA with Firepower Services, managed through an FMC. The two rules at the top are the following:1. Source...
Hello all,Just want to bounce this off you... Today during an upgrade of a server I changed the physical server with a new server. Same IP address and an updated version of Zimbra mail. However, after I moved to the new server (Centos7) I am unable t...
On my 5506-x I manage firepower with the ASDM. Im trying to update the rules because they have never been updated. when i navigate to Configuration>ASA firepower Configuration>Updates and click Download Updates it says "Download updates failed: Un...
Hi all, I have a question about a scenario for which I could not find a detailed answer in any Cisco documentation.- Let's say we have an FTD device managed by FMC.- We have AnyConnect set up, being authenticated via LDAP (AD) with a set-up Realm.- U...
As it is right now I block all STUN traffic. However there is a legitimate use case for it. What is the recommended secure way to handle STUN traffic. Can it be man in the middle-ed like SSL or are there other options to securely inspect the traff...
Can someone please confirm if the Firepower user agent 2.4 supports TLSV1.2? I disabled TLSV1.0 in my Windows Domain Controller 2016 and I'm not getting any mappings anymore, thank you.
Hi,We have Virtual ISE Installed and Looking for Its licensing.I can see ISE-VM-K9 in UDI Information. Is this ISE or ISE PIC and what licenses I needs.Are the licenses free or paid.
