We have installed and running one ASA. we bought another ASA with two license for HA. Clients connected with existence ASA through VPNs. i would like to configure Standby ASA with same pubic ip of old one because all clients VPN connecting through th...
Forum Posts
Just purchased an ASA 5506-x with TAMC firepower license. The license came preinstalled and configured by the vendor. The problem I am having is that when I try configuring an access control policy with instrusion and AMP it complains that I don't ha...
Hello everyone, I am not much familiar with Cisco ASAs, however for the past few days I've been reading and trying to troubleshoot the following issue, but still I have not been successful. I hope somebody here can help me: Cisco ASA 5505 - 9.2(1)(us...
Hi, I'm facing a weird situation. Right after upgrading a FP1210 from 6.4 to 6.6 the management interface stopped responding. I lost connectivity to the FMC. If I connect the interface directly to my laptop it works, however when I connect it back to...
Dear Cisco Experts, My previous question got marked as spam. I just have a quick question about an ACL that I discovered on our ASA at our Branch office. The ACL is on the outside interface coming in rule 1. Is it me or is this rule malicious, or pos...
Hello cisco experts, I am new to the networking field (ccna level) and I am hoping to get some feedback from the pros. I just started working for a company with two offices running a remote site to site vpn tunnel. I started my new job with almost no...
Is it possible to do a port forward on dhcp address to a host inside? I have the following configuration:interface Management0/0nameif managementsecurity-level 0ip address dhcp setroute route inside 192.168.0.0 255.255.0.0 192.168.4.4 access-list ma...
I do not allow any incoming connections on my outside (public) interface. I see a lot of 'Deny tcp src.....' on my outside interface, this is fine and my acl is working. Is there any benefit if I shun an attacking IP address, against a 'deny any any'...
We are migrating from our ASA5520's to FPR-2110 for Anyconnect. I have set up a standalone gateway which I can connect to and authenticate against using certificates. I have another site where I am running the same config only there are two FPR-2110'...
Hello folks! Always when I try to deploy my configs in the FTD firewall, I receive the follow message: "The interfaces 'inside, inside' have ECMP eligible routes configured. Please make sure that interfaces 'inside, inside' are in same ECMP zone, els...
Hello Folks, I am looking for context routingLet's assume if I've destination IP that belongs to context #3 out of 7. Is there any way without enter in context 3rd can we know that IP belongs to which context from ASA default mode? Or anyway like we ...
After installing the new anti virus on all PCs in our company, the CPU usage of our Cisco firewalls increased up to 92%. How can we upgrade the CPU of the device to lower the CPU usage? Thanks.
Hi all, I have 2x interfaces of my secondary FTD (Firepower 2130 failover cluster managed using FMC) whose interface bandwidth step down from 10Gbps to 1Gbps (as seen when i ssh to the FTD) even though there is no config change on the FMC or on my fi...
I have a few firewalls that I have Cradlepoint 4G LTE devices configured as a backup ISP. Works great, no issues with SLA configuration or anything like that. However, I need some more brain power. Because everything is up/up including the Ethernet ...
Hi, I just upgrade mu vDC from 5.2.0 to 5.2.0.7 and get the following error message : Update Installation Failed : [%] Fatal error: Update to version 5.2.0.7 is not complete. Please complete update to 5.2.0.7 Please help to advice how to resolve ...
