Hello for everybody. We are going to install two firepower 1140 in HA, by first connecting each of them to a stack of two switches through port channel. Is it possible to do this in this sequence:1) Each of the devices is connected via mgmt port to t...
Forum Posts
Hi AllWhen FMC reports an SFR as having one high CPU should I expect the ASA CPU to also report it has high CPU?When I check the cpu on the ASA its CPU does not report as high.Thanks,
Resolved! Wipe out an ASA
hi all,just a quick one. what's the 'best' and practical way of resetting an ASA?this is to help me configure the box from scratch.is it by using the write erase or config factory-default command?can elaborate between the two and which is more common...
I am looking into deploying a ASAv in AWS but it has to be FIPS 140-2 certified. I have searched all over the net and found nothing showing the ASAv is or is not FIPS compliant. Does anyone know where this documentation can be
I need help on how to check this error on my cisco router ISR 4331. and why it's appearing on my router logs. Thanks Apr 7 10:30:25.272: %PLATFORM-4-ELEMENT_WARNING:smand: RP/0: Committed Memory value 91% exceeds warning level 90% Version: Cisco ...
I am trying to view a specific line count of access lists on the ASA. Current if I run show access-list inside_access_in I can't specify the line I would like to filter on. I'm trying to view all hits on ACE (access list entries) on line 2. So i'm ru...
Resolved! FTD
I am trying to get better clarification on when to use which of these?FTD url object vs fqdn network object
Hi Team, Can someone please let me know why I would see Total output drops increasing on this interface. My issue is that there is a packet loss on traffic that travels via this interface. Could this be the reason? I don't have QOS enabled. SW3#sho...
I have a hub and spoke environment with a bunch of ASA 5506-X devices. I was under the impression that for a site-to-site VPN between a user (behind a residential internet connection) and my public IP hub ASA, that the private space ASA would require...
Resolved! ASA SSH to outside interface times out
Hello everyone, I did search thoroughly for this specific question and could not find an answer. I am sure it is out there somewhere but if someone here could help me out, it would be greatly appreciated. I have numerous ASA 5506-X devices in a hub-a...
Hi, I need to contact a remote LDAP server via the inside interface.this remote LDAP server is reachable via an IPsec tunnel and due to network overlapping we are natting source addresses before they passthrough the VPN.Is it possible to nat the insi...
Hi all I've got a new ASA Firepower which replaces an other old ASA. The old one has various IP Audit Policies configured, but I think for legacy reasons. What is the default today in regards to IP Audit? Is this enabled by default or not? What are...
Hello I can not filtering more then one SID in intrusion policy. Can I search multiple SID? I have tried , : AND nothing worksalso can I select more category in one filter ? thank you for help Radek
Resolved! FPR4140-NGFW-K9 vs FPR4140-NGIPS-K9
Hi I have a question about difference between the following products: FPR4140-NGFW-K9FPR4140-NGIPS-K9FPR4140-AMP-K9 I want to order the 4145 Firewall, but in "built and price" there isn't FPR4145-GFW-K9 part number.is FPR4145-NGIPS-K9 the same as FPR...
Hi Today i found out that ASA5545 CPU went to 60% and it was all consumed by the DATAPATH-0-2326 process. I could lower it to 30% by removing a capture process that wasnt removed by ASDM after the program close.The average CPU usage three days ago wa...
