Does anyone know if the ISA3000 firewall supports Profinet? I have a customer using the ISA3000 for network segmentation and would like to know its certification status with Profinet. I found an old Cisco presentation that said Profinet certificati...
Forum Posts
2020-04-14T08:08:23.110663-05:00 10.162.53.13 %FTD-4-419002: Duplicate TCP SYN from zone1:x.x.x.x/47322 to zone1:x.x.x.x/21 with different initial sequence number We are initiating a vulnerability scan from within our network and we receive the above...
could someone help me to write class map to enable SIP inspection only for Any source to one/two specific SIP serverand apply it to default policy-map global following is the existing policy-map global_policy class inspection_default inspect dns p...
Resolved! upgrade Firepower
Hi everyone, my Firepower version is 5.3.0 and i want to upgrade it to 6.2.0 . Is that possible or i have to first upgrade it to 5.4.0 . the same thing about firesight . Also can i upgrade the firepower from Firesight . thanks
I would like to know the command on how I can disable the TLS v1.0 and v1.1 in the Cisco ISR4321/K9 and just retain TLS v1.2 ?
Resolved! PBR config questions on ASA
I'm about to implement PBR on our ASA to route guest network traffic out of our secondary WAN connection. I do have a couple questions about the configuration though. Primary WAN Gateway: 165.XXX.XXX.129Secondary WAN Gateway: 206.XXX.XXX.1Guest Netwo...
Dear All,My ASA is sync with my NTP server and showing correct time as we are in +5 GMT zone but in syslog ASA showing wrong time.Kindly suggest regarding the same as soon as possible.Regards,Arshad
Hello, I am trying to create l2tp/isec VPN tunnel on our ASA 5506, but unfortunatelly I don't know why I have no access to my local network when I am connected Over VPN. Could anyone help me with this?my config:: Saved : : Hardware: ASA5506, 409...
Resolved! Confusing NAT statements
I have a dmz server, listening on port 21, I want this server to be accessible from internet. Here are my options:1) nat (dmz,outside) source static ftp_10.20.30.40 x.x.x.x(publicIP) service FTP_21 FTP_21 ^^ Does NOT work. ==========================...
Resolved! crypto pki Trustpoint Process
Hi all,I have question about the Crypto PKI process After the CA Server issu the certificate to the routerIs the Router do a validation check with the CE server ?And how often he tries to make the check ? Thanks,Shimon
Hello everyone, I'm fairly new to Cisco firewalls and was able to pick up an ASA 5512-X not too long ago. Trying to build things out on my home network so that I can better learn about Cisco technologies. I have a single public IP address which my O...
I have a fully working python script that can POST objects to the FMC API using a .csv file for the data.FMC is 6.5.I want to use this same approach/method to DELETE objects, but after many hours I have been unable to get the script to work.Due to th...
Hi,what we need to do when someone complain about download bandwidth reduced . How to verify the issue from the destination side or in the asa Thanks
hello to to everyone, as i am new in firepower 1140 device, i would to like to configure a static nat to the inside interface 192.168.1.1 translated to the public ip which is the outside interface through a pppoe connection (running vesion6.6.0).the ...
Hello All, I was setting up ldap-attribute mapping for having multiple group policies within one tunnel-group. But when i test the connection it fails to select any group-policy and fails since no IP address is being assigned. The ldap-map is:-----ci...
