On a 5585 - I have multiple subinterfaces defined on mutiple interfaces. Each subinterface has a VLAN ID and a /24 subnet. I also have global dhcp relay servers configured and then dhcp relay ensabled on specific subinterfaces that I want to allow PX...
Forum Posts
Noticing that the rommon versions required for different OS / Firepower versions are varied, got me looking for a chart / table of the rommon versions to ASA OS / Firepower versions. Does something like that exist? Is it always a good idea to upgrad...
I'm working from this document: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd64585/?reffering_site=dumpcr but the content is lacking a bit of polish and wondering if anyone has been able to get this working. Right now, my flexconfig is puking...
Today I updated our FMC HTTPS certificate. It shows updated on the FMC under System>Https certificate. However the web browser is showing invalid. The Dates have updated to the correct dates but it still shows invalid. I tried rebooting FMC but the c...
DY-BB-1#sh moduleMod Ports Card Type Model Serial No.--- ----- -------------------------------------- ------------------ -----------1 4 CEF720 4 port 10-Gigabit Ethernet WS-X6704-10GE SAD112102EN2 48 CEF720 48 port 1000mb SFP WS-X6748-SFP SAL1122PWRX...
Hello All, When attempting to Register a new SFR Module to our FMC I receive the message: "Could not establish a connection with device." I know for sure the reg key is correct and I am able to ping each device from the other without issue. The F...
Every since I upgraded FMC from 6.2.2 to 6.4, VPN users show as unknow user. I have a case open with TAC with no resolution yet. Any thoughts? I think it's occurring with multiple clients for I just tested another one. Also, any recommendation for a ...
We currently use an FMC 4500 in our Region that manages our ASA 5545X SFRs that are at our branch offices. We want to use the URL Filtering function on the 5545X at the branch office level. I think we are ok here... The question is the SSL Inspection...
Resolved! How to get Control License for ASA 5506
Hi everyone,I am having a hard time getting license for a new ASA 5506-X.I got the PAK then enter it Product Registration page at Cisco.com. I have reached Step 2 as showed in the picture, I am trying to get a license but it asked me to enter License...
Hi All, I am trying to figure out if we can multiple security zones on same etherchannel. For example: inside & DMZ We have 8 ports on the ASA(standalone) and was thinking to create either one of following. 1- create 2 ports etherchannel for Inside ...
Hi,I have a site-to-site VPN with one of our vendor. Since they have similar n/w with our internal network, we are using NAT in ASA. Now the vendor is moving to Azure and using the same network (local). They are replicating their servers from on prem...
Hi I want to bypass SSL decryption for few websites like Google, Apple, YouTube using DNs. How can I add that if certificate issued to Organization is Google LLC then do no decrypt? I tried O=Google LLC, didn't worked. I tried CN=*.google.com didn't ...
Hello, we have two internet connections terminated on our 5506-X FTD managed through our FMC. Connected to our FTD is a Cisco 4331 router we are doing a DMVPN connection over the primary internet connection to our corporate HQ. The tunnel source inte...
Hello All,i have recently installed two FTDs and they are working as HA, the FTDs manged by FMC and will go live today but when i want to deploy something from the FMC and i cannot see the devices or the HA peer on the deployment tapt, this is just h...
HelloI am about to migrate a Cisco ASA (Active Standby Cluster) to Firepower.My ASA Cluster has L2L VPN Tunels (Policy based and Route Based) and Extended ACL's applied to different interfaces for Multiple Clients Traffic.I am looking for Best Practi...
