I was posed a question and am not sure of the answer.Can you assigne separate zones to subinterfaces on the same intface with ZPF?In other words, if I have 3 subinterfaces leaving one physical interface on a router, can I have 3 separate zones?The r...
Forum Posts
Hello everyone,I have a question regarding debug in FirePower devices without using FMC. Just want to make sure the procedure is correct:- enable diagnostic logging in FDM,- enable console filter in FDM with level set to debug,- enter system support ...
has anyone set this up before? I did pretty basic setup 2x4150 per data center and 2x7702 per data center (HSRP, etc). Similar setups with 9300 worked just fine (few differences)We did best practises with site ips, MAC filters, etc and everything wor...
Hey all, I'm working on a lab in PT and I'm wondering if someone could help me with the syntax for these two commands I need to put on my ASA:Put commands on ASA to allow for ASDM access from inside networkConfigure dynamic PAT using outside interfac...
Good evening,I'm working on procuring C9200L-24P-4X-E switches and since it comes with Network Essentials license I'm wondering if supports FIPS mode? Thanks
We have a separate intrusion policy for ingress trafffic from the internet to our DMZ servers. When I run Firepower Recommendation on this policy, it suggests changing dozens of old browser vulnerability snort rules from Disabled to Generate Event an...
What command do i use to check if a vpn address pool is full?
Hello,We have a site to site VPN configured on cisco asa 5505, VPN is up and we can see TX and RX but we are unable to get any ping replies. We also tried RDP and other access to the remote end but no luck.The strange thing is TX and RX are going up ...
The PxGrid certificate for our ISE 2.4 and DNA-C 12.2.10 integration has expired and I am unable to find a way to replace it. Is there an way to renew the certificate without bringing down the fabric and deleting the old ISE server in DNA-C? Screensh...
I have 2 LANs connected across a VPN Site to Site with 2 Cisco ASA 5500, it is working OK, but on one of the ASAs the AnyConnect users need to connect to the other LAN accross the VPN, is that possible, here are a basic diagram that I made for a bett...
Hello,I have 2 LANs connected across a VPN Site to Site with 2 Cisco ASA 5500, it is working OK, but on one of the ASAs the AnyConnect users need to connect to the other LAN accross the VPN, is that possible, here are a basic diagram that I made for ...
5515X booting to ROMMON. The goal here is that the Firepower Threat Defense docs say that to convert an existing image to Firepower Threat Defense you must be in ROMMON mode. I went through the doc setting the server, address, gateway, image file nam...
Hello ASA lovers, I have a question regarding ASA. Consider this scenario we have an ASA connected to two service Providers with two interfaces and remote VPN connections are coming through bothISPs My question is how I can configure the ASA to route...
We have a vASA in AWS that has been configured with Anyconnect VPN support and have noticed that we are able to connect, however, the initial connection takes about 90 seconds to complete. After being connected, the client will disconnect and automa...
Hi All, Please Help if anyone can...I have a private service hosted on an external partner which has a public IP (187.x.x.x), they allow traffic from our office public IPs, so when I am at the office I can access the service, but when I out of office...
