: Hardware: ASA5508, 8192 MB RAM, CPU Atom C2000 series 2000 MHz, 1 CPU (8 cores)!ASA Version 9.12(3) Anyconnect version is 4.8 ldap configldap attribute-map AM-ANYCONNECT-USERSmap-name memberOf Group-Policymap-value memberOf CN=VPN_Users,OU=People,D...
Forum Posts
Cisco FPR-2140 running ASA image showing interface speed 1Gig in ASA CLI and shows 10gig on FXOS CLI
Hi, We have a pair of FPR-2140 appliances running asa 9.10 image. The appliance has 4 x 10gig interfaces. If I go to fxos CLI the speed is showing as 10gig on all the four interfaces. But if I check on the ASA CLI it is showing as 1Gig. Does this req...
Hello, I have a Cisco ASA configuration : HA- Active/Standby.As soon as I set up standby, I lose the ssh connection. This is because the management interface is overwritten by the synchronization of the configuration with the 'Active'.Can you help me...
Resolved! UPGRADE ASA 5525 AND 5515
Hi, Someone would you help me?There are differents between Cisco ASA 5525, 5515 with 5515-x, 5525-x. Because I need to upgrade these fws by a new release, but in the Cisco Page I just found information about 5515-x, 5525-x. I guess that they are end-...
HiI am getting a bit confused with the term "ISE Device Administration via TACACS" and what it actually means. Is it possible to use TACACS to authenticate ISE system administrators? I.E. If more that one person has the authority to perform ISE syste...
Hello, Using FTD Version 6.5.0.4 on FPR2110, and managed with FMC. I am trying to access SNMP in LINA via the inside data interface, and it is being denied.The sanitized packet capture below shows an output-interface of "NP Identity Ifc", which I und...
I'm posting this to find out if anyone else has experienced this problem and to notify others of a possible bug that can shut your Firepower connection down. This is the third time now that the Outside port of our Firepower Suite has disconnected f...
I am trying to connect to a provider over the internet. The call comes up, but no audio. Per the provider my router is modifying the SIP SDP info to be the IP of the PAT address on the router instead of the 1 to 1 NAT. I have tried turning SIP inspec...
Dear all. I configured IPS on firepower and configured it to send me email when it is being triggered. I configured it on Policy-Action->Alert->Intrusion Email. All IPS rules has been selected. Approximately two days later of configuring IPS notifica...
Hi, we are running virtual ISE PIC on demo License but now need to license it with permanent. Is there any SKU , I need to provide to Cisco and How many License I needs as Its talking to AD for passive authentication and FMC to share user to IP mappi...
Hi, I have console and management (eth0 port which is labeled as '1') connections to 2 FMC 1000 devices. I am working on getting these configured. I can get to the console connections for both. However the management connection on device 1 takes me ...
Experts, Do you know how many split routes the client can support when asa and anyconnect do SSL VPN? A previous version had a limit of 200. How many can be supported after the upgrade has not been described in the documentation, please give pointers...
Resolved! Cisco ASA + NAT Configuration
I have Cisco ASA & below is the sequence of existing NAT. nat(inside,outside) source 1.1.1.1 2.2.2.1nat(inside,outside) source 1.1.1.2 2.2.2.2nat(inside,outside) source 1.1.1.3 2.2.2.3nat(inside,outside) source 1.1.1.4 2.2.2.4nat(inside,outside) sour...
I was just able to get vulnerability scanning for a vFMC suite with 2110's started and it's calling out the SSL Certificate cannot be trusted. This and a few others relating to the same thing. The FMC has a valid certificate, but the scans are pi...
