Hallo,in my Cisco ASA configuration I have the following (default) command:timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02Based on this configuration I would expect to see all UDP connection to timeout after 2 minutes and ICMP conne...
Hi, We have a 5520 that rebooted yesterday and I am not versed enough with CISCO to know where to start. I have included a show inventory; show tech-support and show crash.Any help would be much appreciated. Direction mainly on how to understand c...
Hi everyone, ASA 5510 is configured as dhcp server.Here is setup AP1252---------vlan 15--------Switch---vlan 15 ----WLC----------Switch--------trunk carrying vlan 15,16------------ASA---Do i need to config dhcp option 43 on cisco ASA? Regards MAhesh
how to check the port-channel status & associated interface details in FTD. when i login to the device, it lands in the below mode/console; Firepower-module1>
Hello There! I have installed a new CISCO ISE, we have pending authenticate the users using TACACS on SG300, but I don't know how to configure TACACS on these switches.... LoL I can't beleive it, I was able to configure on Nexus, but anyway, any idea...
Hi Does anyone know how to achieve the following. We have one FMC managing a number of different IPS modules. I'm trying to limit the report to one pair of devices without using the search editor by inserting the device name i.e. Joefw-* into every s...
Hello Guys, Our customer have a pair with 2110, which are going to replace a pair of 5508-X.The vesion of the code and configuration of the new firewalls should remain the same, that's why I've downgraded the asa image on the firepower with cisco-asa...
Hi, we have ZBF running on an IOS 15.4. It is logging dropped packets to a syslog server.We can't seem to log passed packets as there is some traffic we are interested in.We've tried auit-trail and alert on but still not seeing anything of interest.A...
Hi, I am having issue with ISE PIC Standard licensing and getting bellow error when importing. Invalid License, cannot install ISE PIC license or ISE PIC UPGRADE license on ISE. I have Product ID ISE-VM-K9. Please reply if anyone have similar issue a...
Is there a way to confirm that all the connection events from an FTD box is making it to the FMC and recorded in the DB? I'm working through the "frequent drain of connection events" on one of my 4110s and TAC advised to disable logging to ramdisk, ...
I have a ASA 5506-x v4 and im wondering if I can use the firepower management center to manager the firepower sensor on the ASA. When I go to the IP address of firepower I get this message: (I dont have a active service sontract as this is just for ...
Hi is there a way to mute an IPS email alert via correlation events for a GID/SID combo? I tried matching based on rule name, but I want an "IS NOT" option (to filter out email alerts to not send). You can filter SID, but the problem is, multiple rul...
Hi ,Currently our DC Nexus 7K's use local authentication, we want to move this to TACACS+. We have done this with our Nexus 5k's without issue. Some background , we use mgmt0 for remote OOB access via the internet, when connecting internally we conne...
HI alli deployed new virtual FTD V6.5 and do default route from inside to out side and can ping to 8.8.8.8 but cant open any web site can any one help me
Hi AllI need clarification on the following.For our Internet Access we have two firewalls in line as follows."Internet Router"---"FTD2110"---"Second FW"----"Internal-LansOn FTD our ACP policy Inbound rules "permits" specific destination IPs and ports...
