2020-04-14T08:08:23.110663-05:00 10.162.53.13 %FTD-4-419002: Duplicate TCP SYN from zone1:x.x.x.x/47322 to zone1:x.x.x.x/21 with different initial sequence number We are initiating a vulnerability scan from within our network and we receive the above...
Forum Posts
could someone help me to write class map to enable SIP inspection only for Any source to one/two specific SIP serverand apply it to default policy-map global following is the existing policy-map global_policy class inspection_default inspect dns pres...
Resolved! upgrade Firepower
Hi everyone, my Firepower version is 5.3.0 and i want to upgrade it to 6.2.0 . Is that possible or i have to first upgrade it to 5.4.0 . the same thing about firesight . Also can i upgrade the firepower from Firesight . thanks
I would like to know the command on how I can disable the TLS v1.0 and v1.1 in the Cisco ISR4321/K9 and just retain TLS v1.2 ?
Resolved! PBR config questions on ASA
I'm about to implement PBR on our ASA to route guest network traffic out of our secondary WAN connection. I do have a couple questions about the configuration though. Primary WAN Gateway: 165.XXX.XXX.129Secondary WAN Gateway: 206.XXX.XXX.1Guest Netwo...
Dear All,My ASA is sync with my NTP server and showing correct time as we are in +5 GMT zone but in syslog ASA showing wrong time.Kindly suggest regarding the same as soon as possible.Regards,Arshad
Hello, I am trying to create l2tp/isec VPN tunnel on our ASA 5506, but unfortunatelly I don't know why I have no access to my local network when I am connected Over VPN. Could anyone help me with this?my config:: Saved : : Hardware: ASA5506, 4096 MB ...
Resolved! Confusing NAT statements
I have a dmz server, listening on port 21, I want this server to be accessible from internet. Here are my options:1) nat (dmz,outside) source static ftp_10.20.30.40 x.x.x.x(publicIP) service FTP_21 FTP_21 ^^ Does NOT work. ==========================...
Resolved! crypto pki Trustpoint Process
Hi all,I have question about the Crypto PKI process After the CA Server issu the certificate to the routerIs the Router do a validation check with the CE server ?And how often he tries to make the check ? Thanks,Shimon
Hello everyone, I'm fairly new to Cisco firewalls and was able to pick up an ASA 5512-X not too long ago. Trying to build things out on my home network so that I can better learn about Cisco technologies. I have a single public IP address which my O...
I have a fully working python script that can POST objects to the FMC API using a .csv file for the data.FMC is 6.5.I want to use this same approach/method to DELETE objects, but after many hours I have been unable to get the script to work.Due to th...
Hi,what we need to do when someone complain about download bandwidth reduced . How to verify the issue from the destination side or in the asa Thanks
hello to to everyone, as i am new in firepower 1140 device, i would to like to configure a static nat to the inside interface 192.168.1.1 translated to the public ip which is the outside interface through a pppoe connection (running vesion6.6.0).the ...
Hello All, I was setting up ldap-attribute mapping for having multiple group policies within one tunnel-group. But when i test the connection it fails to select any group-policy and fails since no IP address is being assigned. The ldap-map is:-----ci...
Resolved! ASA 5520 Formatted Flash
I bought an ASA 5520 from a local for sales and the seller said it had the botnet filter and GTP/GPRS included. The ad also said it would be reset to factory defaults. Upon startup, I was presented with the ROMMON prompt. His version of factory defau...
