hi,i can't seem to issue 'failover exec mate' commands from primary ASA FW and i can only SSH to the secondary FW using the 'local' username and not via ISE/TACACS.the 'show failover' output seems fine and i can ping each other's failover IP and ping...
Forum Posts
Hican anyone point me to a detailed Document for backing up our FMC/FTD's to a remote location i can see the options of NFS/SMB/SSH I have tried creating a NFS backup but I get a failed to mount error, any help would be great. Thanks
We have Cisco 3750 switches throughout which we want to implement mac filtering. Is it possible to setup mac filtering to retrieve its allowed list from an external source. The reason is so technicians who dont understand Cisco can maintain the acces...
Resolved! Please help!
Hi Everyone, There are 3 tunnel-groups i have setup as attached. Because the AnyConnect VPN is for mobile users, and i want the end-user experience to be as seamless as possible. Is there a way that i can "pre-select/choose" the "City Of Sydney" fo...
Hi guys,In order to reduce the amount of policies that I need to configure on my security router, I'd like to be able to reuse policies for multiple zone-pairs, including for the self zone.But if I configure a zone-pair that includes the self zone, a...
I'm currently evaluating a Cisco ASAv in Azure. Right now, all that I am evaluating is client vpn using Anyconnect. When connected, I need it to be able to access resources in Azure as well as on-prem. So far I have it setup to access the Azure part ...
Hi, We Have FMC 1000, version 6.2.0 and IPS - FP7115-K9, version 5.4.0.1. Unable to deploy IPS in FMC due to version incompatibility. So i we suppose to upgrade the IPS version to 6.1.0. As a initial step, we tried to install 5.4.0.2 patch in IPS via...
I am a firewall newbie so please excuse my ignorance. I need to open some firewall ports to setup a Barracuda web filter. Do I open ports under NAT Rules in ASDM 7.9 or some other place? Thanks for any guidance, I really appreciate it. Here are the p...
hello everyone I have a problem on a Cisco Security Manager 4.17 installation.I noticed that the CMFOGSServer.log file has reached huge size (about 2Gb) and contains logs from 3 years ago.How can I reset it? If I try to rename it I receive a message ...
Resolved! how to enable ssh on ASA 5525
May I know how to configure for remote accessing ASA 5525 via sshI have issued the following commandsssh 10.60.0.0 255.255.0.0 outsidessh 10.60.0.0 255.255.0.0 dmzssh 10.60.0.0 255.255.0.0 insidessh timeout 5but I am not able to ac...
I'm am attempting to discover users within our infrastructure through a network discovery policy, but the FMC doesn't seem to discover anyone. I have a network discovery policy configured to detect users, hosts, and applications. Do I also need an id...
Resolved! vASA, are subinterfaces supported ?
Simple one, I'm configuring a vASA for the first time ever !! and not really a cisco Engineer to conduct a quick bit of Lab work between a Cisco and Juniper SRX ( vpn issues ) .I can create a interface on the inside of the ASA and ping it, but if I c...
Resolved! ASA NATing doesn't seem to work
i have ASA 5510 firewall and Fortigate is connected to vlan interface in ASA. I have public IP address NATed (object NAT) to the outside interface of the Fortigate. the NAT doesn't seems to work, I see the traffic hitting the public IP address but no...
Hi Experts,We are facing some issue on what I think is caused by fragmentation.After doing a packet capture on the network, we noticed that we are receiving multiple Dup ACKs, Re-transmissions and TLS Ignored Unknown Record。Multiple applications are ...
Hi, I have FirePOWER 2100 but I am using ASA code. I am migrating from ASA 5510 to FIrePOWER 2100.In the previous setup, with ASA 5510, I have Redundant interfaces configured, but the FirePOWER 2100 does not support this kind of interfaces.What can ...
