I'm planning a firewall upgrade to two ASA5555-x appliances in HA failover from 9.4(4)5 to 9.6(3)1. Traditionally, a direct upgrade like this would break zero downtime functionality, as you were required to upgrade between adjacent releases when cha...
Forum Posts
Hey guys, I have a Cisco 2821 Gig Router and I have Syslog enabled. Someone is attempting to log into my router and they are relentless. Here are the syslog entries. Warning10.0.0.1%SEC_LOGIN-4-LOGIN_FAILED: Login failed [user: root] [Source: UNKNOWN...
We are looking to move a Data Center. Not a pretty project, for sure... The current Data Center Hosts make any form of monitoring of Bandwidth usage unreliable. What is the best suggestion on Logging or monitoring the Traffic to/from our ASA devic...
Configured the following on ASAv: object network LOCALhost <local private address> object network REMOTEhost <remote private address> nat (inside,outside) source static LOCAL LOCAL destination static REMOTE REMOTE no-proxy-arp access-list outside_cry...
Hi. I haven't been able to find the information. We're deploying a new virtual FMC that is going to manage 2 FTD devices (2100). This customer doesn't want to give full Internet access to this machine, they say they want to restrict to certains ports...
Hi all, When i try to install the FirePOWER software on Cisco ASA 5516-X and i issue the following command: ASASFR-boot> system install ftp://192.168.2.4/asasfr-sys-6.2.2-81.pkg It gives the following:Verifying 110Upgrade aborted When i ping the addr...
We are working with a Firepower FPR 1100 series firewall in the main office and a remote location with a layer 2 switch. On port 2 of the firewall, we have a server with IP address 192.168.1.3. At port 9 on the firewall we are connected to a switch...
Resolved! ASA NAT Best Practice
Hi I am in the process of reconfiguring all the outside access rules and NATs as we are migrating to a new public IP range. My question is about the best practice when configuring the NAT and access rules. I want to only use manual NATs. 1) Should th...
HelloI exported an identity certifciate from an ASA 5585 (asa915-smp-k8.bin) - I essentially followed the steps in the post below: https://supportforums.cisco.com/document/12466681/how-export-asa-identity-certificate-through-asdmWhen I try and import...
I have firepower on my asa 5506-x,I have the Firepower Management Center working and recognizing the ASAIf I go to Devices>Device Management>(my device) and then choose troubleshoot, and then go to advance troubleshooting, I only get file download. I...
I'm just looking for information on the IOS zone based firewall in HA mode also running DMVPN and if its possible, supported and a good idea or not. I would prefer to use 2 HA break out firewalls for firewalling and DMVPN +internet on 2 ISRs dedicate...
can someone assist me why is showing private cloud during integration AMP with FMC Last login: Tue Feb 18 10:16:42 UTC 2020Server: 4.2.2.2Address: 4.2.2.2#53Non-authoritative answer:api.amp.sourcefire.com canonical name = api-vpc-1125033044.us-east-...
does an ASA 5506 support spanning tree ?i need to connect a ring to it on the external side
Dear all. we use network discovery and it works as expected. But today we faced interesting issue. When i looked at x.x.x.x ip's identity, it shows that current user is TOM, but we are sure that TOM's ip address is y.y.y.y. when we look at y.y.y.y it...
Resolved! Common Criteria FPR2100
Hi all, i'm finding it a bit of a minefield determining if the FPR-2100-NGFW is EAL4 certified (common criteria) https://www.commoncriteriaportal.org/products/ According to the CC site it is not, however this link from Cisco suggests that it is (but ...
