Our FMC manages 4 ASAs in routing mode. Reading the upgrade guide and watching YouTube videos leads me to believe "nothing" happens to traffic flow during the FMC upgrade. I just want to run the question by the seasoned folks in the trenches before b...
Forum Posts
hi,was trying to google search but can't seem to find the answer.just wondering what's the difference between aaa authorization exec authentication-server vs aaa authorization exec authentication-server auto-enable?i know the latter since we're using...
After updating an ASA5545 with IPv6 functionality enabled to version 9.12(3)12 (coming from 9.8(2)28) we get the warning:"Warning: duplicate link-local address: xxxdetected on interface abc. IPV6 function is stalled. You need to shutdownand then unsh...
Hi, I am creating reports on FMC but cant see any data showing when reports generated. Am I missing anything, All the access rules have logging enabled.
Hi ASA Experts， I have two ASA 5516-x working with a transparent failover mode. Both Asa can work well. I have setup the local management port IP and sfr module's IP in the same subnet. Both sides Ping are successful. But I cannot find the sfr module...
Hi,Currently, I am using Cisco Firepower 2110 with Virtual FMC version 6.3.0.2The issue is whenever I want to update my policy and hit deploy the attached error occurs and to avoid this issue I removed the IPS/Malware policies in the access control l...
Resolved! FTD and Management
I need a few clarifications a) I need to provide two Cisco Firepower 2100 Series in a HA par to customer and customer already has Firesight at his data center. I need to demonstrate this two firewalls first at my place without Firesight. Is it possib...
Using the Cisco FirePower 2100 to manage the ASA, not through the FMC. AnyConnect is already deployed for the correct amount of users but they know how AnyConnect Apex licensing. How is Smart Licensing for Apex deployed on the Firepower 2100? I've lo...
Hi Cisco FW experts, We are working for ASA5525-X deployment. we have setup 2x ASA5525-x as a cluster and both can work well.But, the dashborad page in ASDM is always incorrectly. It seems ASA disconnect the link with ASDM.I upload screenshot there. ...
Resolved! ASA 5505 ROMMON after erase flash
I was trying to erase some bad test configs on my 5505 with a write erase, but all VLAN and Ethernet configs remained. I hastily decided to do an erase flash. No I'm stuck at a ROMMON prompt with no image found to boot I'm hoping I don't have to TF...
I noticed numerous amount of CLDAP traffic to one of my DC starting 3/17/20. The device is a Firepower 1010 running FTD 6.5.0.4. The FTD has no open ports and only two NAT rules. One rule for a site to site VPN and the other rule for devices fro...
Hi, I have a multi context ASA where in one of the context there are 7 subinterfaces... Due to a new business requirement 3 of those subinterfaces and related ACL has to be migrated to a FMC with new FTD Logical Device Is there an automated way to m...
HiI have an ASA that's only being used for AnyConnect a few days ago, at random, the clients will lose their connection to the ASA. When I have been able to catch the drops, from the FW I'm no longer able to ping out to anything external. The only wa...
Hi everybody, We would like that the system sends an email always when a user log in through telnet or console ASDM, also if any user make any change in the config and save it. Some mails are arriving correctly but we want. The config is this: smtp...
Hello!I use AnyConnect VPN Secure Mobility Client and ASA 5515 and faced with truble: only 10 or 20 people can establish VPN with this ASA and other people can't, they see error: "The vpn connection was terminated due to a loss of communication with...
