Hi team, I'm simulating packet tracer before putting my FTD on production: But when sending a packet from a Lan machine to google : I get always this result : Result: input-interface: inside input-status: up input-line-status: up output-inter...
Forum Posts
We deploy ASAv50 version 9.12 but I found ASAv50 display failover state difference CLI with ASDM. CLI Display : Active/ActiveASDM : Active/Standby Please suggest me .
I currently am using a ASA 5510 Firewall and ASA 5516-X, by defaut what security settings aren't enabled that I should have enabled in any network configuration? Also, by Default is IPS/IDS enabled or is this something that needs to be configured? An...
Resolved! FTDv w/FDM smart licensing question
Hello all. I have a client who requires an air-gap FTDv deployment. They are using FDM for management. This client cannot use a satellite server, they don't want any communication over the Internet. I know that software version 6.3 provides an air-ga...
Resolved! [ASK] Inside can't access DMZ on ASA
Hi all,i have some problems which seems too wierd. I have an ASA 5540 in my client's office. The previous plan is using inside and outside scheme only, while dynamic natting all inside network (10.0.0.0/8) to outside. And static nat several IPs too. ...
Resolved! Port forward and ZBF
Hi All,I have a number of ports to be forwarded to an internal server. All works fine until I apply my ZBF config.Anyone able to cast an eye over my config to suggest how I forward a single port from the internet (dialer 0) to a device on vlan 20?i.e...
I frequently see devices listed in "Indications of Compromise by Host" When i drill down to see what the issue is, it's usually "The host may connect to a phishing URL" or "Malware Site" When i drill down further to the events that triggered the IOC,...
Resolved! aaa new-model
Hello, what is the suggested method to configure aaa new-model and 802.x on a remote router without locking myself out of the router and if I did lock myself, what is the process to recover and access the device again. Here is my current config aaa ...
Hi there, I am Currently using Ciscofirepower 2110 as an external firewall with Virtual Firepower Management Console(FMC) 6.3 version. I have 2 questions regarding Custom URL Filtering. 1st: how can we check via FMC which URL is blocking firewall and...
Hi forum,Due to SOX requirements, we are supposed to perform penetration testing on the firewall to ensure it is working as accordingly. There are tons of info on the web, I am almost complete novice at this, I would appreciate if you could advise me...
Resolved! Searching logs in ASDM for IP address
Hi Everyone,I need to check logs for user PC IP in asdm.I am on asdm page that shows real time log viewer.Under filter by i put user PC IP address and click on filter it shows blank?ThanksMAhesh
Resolved! FP Diagnostic interface setting up
Trying to enable diagnostic interface on FP 2100 for gathering information over SNMP. The interface itself marked green in FMC and static IP address is set up but neither ICMP or SNMP to this interface are not responding. Management interface itself ...
I'm struggling to understand the distinction between all of these terms. Is someone able to help me understand what is what?
Hi,is there any impact of disabling dns inspection on asa or in what scenarios we have to remove policy-map global_policyclass inspection_defaultno inspect dns Thanks
Resolved! Cisco 2900 Security License
Dears I am ordering a security license for the 2900 router L- SL-2900-SEC-K9 hence please anybody confirm to me that i am ordering the correct part number. Also can anybody tell me what is the difference in these part number SL-2900-SEC-K9 ,, the pri...
