Hello guy, We received 1 week ago, 2 FP4140 devices in order to replace old ASA5585 active/standby pair.After migration, we saw some "random failover" between primary and secondary. Our investigation showed that one of the FP4140 had lot of failure l...
Forum Posts
When I was troubleshooting connection between two host, ASA is between them . I got below packet capture : 1: 20:22:10.640897 125.62.z.z.63911 > 115.112.x.x.1720: S 4238196124:4238196124(0) win 5840 <mss 1460,sackOK,timestamp 171694205 0,nop,wscale 5...
Hi Team Could you please help me find a solution, unfortunately i couldn't find a similar use case on the internet. I am sure someone in this forum has done this and i would like to understand the configuration migration process.Here is the sce...
Hi,If I want to capture the vpn traffic for troubleshooting purpose from the server to the client ,does it show the unencrypted traffic ? Thanks
History;We have Cisco ASA5555-x deployed to deliver ipsec ikev2 vpn remote access in two scenarios which work pretty well.1. ASA connected to the DHCP subnet and use infoblox to supply ip addresses to connecting clients.2. ASA connected to network wi...
Hello,Can someone help me with the below error while deploying policy to the Cisco FTD from the FMC. Cisco FMC(Virtual) - 6.2.3.14Cisco FTD - Cisco ASA5545-X Threat Defense (75) Version 6.2.3.13 (Build 53) Error Msg.- deployment failed due to failure...
How keep my FMC customize intrusion policy on firepower manager center? When I update SRU rules , it would keep my original customization rules, such as I only enable 110 rules to Drop and Generate Events and enable 2023 rules to Generate Events. Aft...
I have a brand new ASA-5506 with just a control license and 5510. I'm looking for the correct link to purchased the IPS, URL Filtering or Advanced Malware Protection (AMP) license. I'm building my CCNP security lab. Any help/advice is welcome and tha...
Hi, I'm learning about AAA, and i have a hard to correlate with what i have learned at Privileg Level and Role-Based Views . All i can test is in Packet Tracer 1) Let's take a scenario and assume I will use privilege levels 5, 10 and 15 on my router ...
I am trying to setup a dynamic nat from a public IP address to an internal IP address to allow access to a Microsoft SQL database. I want to configure this to allow my network object Cybernautic to access the network object MicrosoftSql. This is my c...
Hi All, I am a beginner with Cisco configuration and I am currently using ASDM to configure our ASA 5515-X. I am having an issue where I want users to vpn login from outside into the ASA VPN and then see the internal network (192.168.0.0/24). I can ...
hi guys, I have just installed my first FTD 9300 and during installation, i forgot to set the FMC registration key and IP. I have looked everywhere to see how I can go back to the initial setup wizard, but been unable. I have reset the device via ma...
Hi Guys, I'm currently CCNP R&S certified. My Certification will expire in August this year. I wantto understand if let's say, I do not re-certify and my certification expires. After my certification has expired and I want to do CCNP Security in futu...
Is there a programmatic way to retrieve the current active sessions (individual sessions with usernames) from FTD/FMC? I've looked at the SNMP OIDs and the FMC REST API, but could not find anything. I know this information is easily available from th...
Hi all,I have just booted up my FirePower 2110 Appliance, on my WAN interface, I can't seem to find anything with regards to PPPOE authentiation, is this a supported feature? Thank you.
