hello everyone i want to allow all the trafiic coming from the subnet(192.168.10.0/24) connected to outside interface going to the subnet(10.30.30.0/24) connected to ninside interface please help me i tried all the ways but still havent yet go...
Forum Posts
Dear community, it's high time I created an account here. I've recently purchased a Cisco ASA 5520 and wanted to boot it / wipe it.However, the status light is constantly amber and, while the management port lights up with an ethernet cable, I have n...
Hi Folks, I have been trying to configure multiple access-group in same interface in asa Version 9.1(5)16. But, i am able to configure only on access-group per interface. Can you please clarify me that, how many access-group can be configured per int...
Hy! I have a 5506 Firwall which is about 1 year old. Last week we had to make a restart and now when i put in the power cable i only have a red light flashing and the firewall won´t start. Also when i try to connect via console i will get no answe...
Resolved! IKEv2 VPN working without NAT exemption
I'm trying out the setup of a static to dynamic IKEv2 IPsec VPN. The VPN is working, and pings from the client PC 2 in the image below (192.168.2.2) are successfully making their way to the client PC 1 in the topology. ISAKMP and IPsec SA stats are ...
There have been problems with Ransom ware sites,we have list of site IP address that cause problems, so that is easy to add to a black list groupbut some locations are only known by their FQDN from certain Domain serversso we blocked that Domain serv...
Security Intelligence Events shows https://www.microsoft.com as being URL blocked and classified under Security Intelligence Category as "URL Malware." Is Firepower's Collective Security Intelligence (CSI) URL blocking Microsoft.com?
Hello Support, I have a question in regards to accessing the http interface of the logical device created in the FirePower chassis. I created the logical device, but cannot access the http web page. It reads as blank. I am able to SSH to this without...
hi,i'll be configuring AAA on our FWs and need to confirm if this single command line for AAA accounting is enough to log the executed commands to ISE: aaa accounting command <ISE-GROUP-NAME> or just these two? aaa accounting command privilege 1 <ISE...
Resolved! End of Service for ASA5515-SSD120-K9
Hello there. We currently have a ASA5515-SSD120-K9 we purchased for use with CX bundle. Cisco marked this model of firewall for end of service in August 2020 and encourage to migrate to Firepower. We migrated this CX to firepower some time ago using...
Hi,Can I know if it possible to do manual IPS signature update on the newer NGIPS (eg. Firepower 4100 series)
I am trying to set this up for SolarWinds, this works a few of my other ASAs. I need some help. ASA Version 9.8 CMI as follows: ASA(config)# snmp-server group ALL-ACCESS v3 privASA(config)# snmp-server user SNMPnetwork ALL-ACCESS v3 auth sha SNMPword...
Resolved! config-register not accessible
Hi when i try to make a password recovery i use the command confreg but i omit to put 0x2102 and now im able to boot login to the ASA but the startup-config is not loading the config. here is the MSG: Ignoring startup configuration as instructed by ...
I have a location that we acquired that has a second location connected to them via a site-to-site tunnel. We just took over management of the hardware at the second location and need to get syslog messages sent to our existing syslog server. The exi...
I have a HA pair of Virtual FTDs on a couple of ESXi 6.5 hosts in the lab. They were built with the 6.4 image and are using the local FDM management. They have been patched a few times with the 6.4 patches and are currently running 6.4.0.5-23.I hav...
