Hi, I am looking for help with my NAT configuration on Cisco ASA 5516-x with Firepower services connected to FMC. Our local subnet LOCAL.NET.0.0/16 already has an Internet connection, with public IP XX.X.228.50. To obtain it I created typical Dynami...
Forum Posts
Resolved! VPN IPSec no starting on ASA 5510
Hello,I have a environment with two Cisco ASA as screenshot follow. I´m trying establish a IPSec VPN Tunnel between 10.10.10.2 and 10.30.30.2 but unsuccess.all routing it is working and each ASA ( ASA01 and ASA02 ) are able to ping each other.The poi...
Resolved! FMCv Upgrade to 6.4.0.4
Hello all, I'm new to the whole FMCv with FTD setup so bear with me... In production we have an FMCv running 6.2.3.2 with two FTD2120s in HA pair running the same version (6.2.3.2). I am looking to upgrade the FMCv and FTD's to the latest starred ver...
Hello, I have couple of queries for configuring remote back up from FMC , Appliance to remote location. As per the attached image ( Create_Backup ) , for the "Back Up Configuration" option which configuration it is referring to ? Is it FMC Interface ...
What purpose doe the AD join serve when creating a realm with the FMC? It seems to be the only difference between AD and LDAP is the AD boxes. Since AD is LDAP, why is there even two choices here? Why would I use one over the other?
Resolved! IPSec lifetime configuration - FDM
Hello everybody,I'm trying to find out where to specify IKE Phase 2 Lifetime duration (IPSec lifetime)? Under objects, you can only define lifetime for IKE Policies - Phase 1.Software version is 6.3 and configuration is being done via FDM. Appliance ...
I have 2XASA5585-X firewalls in active/active failover mode, with 30 contexts. But we receive the following error message at irregular interval;Lost Failover communications with mate on interface QUIDEVFailover interfaces are GE0/0 and GE0/1Cables ar...
HelloI want to do a Destination NAT using the ASA. # Diagram How can I NAT when accessing Telnet from client to router? Original Packet Source IP Address : 172.16.100.128 Source Port : any Destination IP Address 172.16.100.135 Destination Port : TCP...
Resolved! Adding a new AAA SERVER GROUP
I will give some context so there is already have aaa server group running radius and local database as backup.So My company which is going to manage their security devices is asking as to add another server groups running TACAS+, My doubt is if aft...
Resolved! Encapsulation Failed error with ZBFW
Can you guys help me figure this out?Inter-zone communication is interrupted with "encapsulation failed". This is a minimal proof of concept simulation in Packet Tracer to start getting into ZBF. One router with two interfaces, each on one zone: LAN ...
My goal is to make the WAN interface of my router "stealth" to unsolicited TCP incoming packets. That is so that it simply drops packets without a match in the NAT table instead of replying ICMP host unreachable. The router is behind my ISP modem and...
Is there any temporary license or method could be used to activate ASA 3DES function on Cisco FPR2130-ASA-K9 and FPR4110-ASA-K9.Our Tier 2 partner forgot to order licenses and now the devices delivered but end user urgent to activate these devices.
HI.. I have been running ASA firepower and have setup access policy on FMC, currently policy is setup for IPS as any any. Now i want to setup another IPS policy for outbond to inbound on FMC, could you please help to configure policy for outbound to ...
I have a task as part of an assessment which is completely stumping me. I am required to use ASA FTP inspection to block access to a particular directory for all but one user. I believe I know how to use a policy map to identify the user (match not...
Trying to configure the FW to allow ssh from a remote vpn user to an inside private host over Mgt interface and allow traffic out Outside interfaceVPN is working correctly, ssh is not working to internal host in private subnet(traffic from the VPN su...
