Hi guys, I need up-to-date info about ASAs.I am seriously considering replacing a physical Fortinet firewall that is using multiple VDOMs.I have used 55xx ASAsa few years ago, and I remember using contexts which from memory were the equivalent to VDO...
Hi,Can anyone help me?!I’ve had an ASA5510 up and running for some time without any issues.I recently purchased a ASA-SSM-AIP-10-K9 card to learn with.When I received the card, when doing a Show module 1, I could see that there was no firmware on the...
Hi,i have vlans on my network that are natted to the outside to go on the internet, now i want to publish a server on the internet.i have a public ip for the internet on a cisco ASA firewall interface, i want to add another public ip on the same inte...
Can someone tell me what I will need to purchase for Firepower. I have worked with and deployed Firepower but it has been a couple years now and I need a refresher. I will be getting AMP and URL filtering licenses (annualized) but I see topics with F...
Hi Team, I have an ASA5545 with Version 9.4(3) running. It also has ASDM Version 7.4(1) installed at the moment. I want to upgrade this to ASA Version 9.6(3.1). Should I upgrade the ASDM version as well?Please refer to the attached image captured fr...
Hello everyone,I have a ASA 5520 Appliance running 8(3) IOS and 6.1 ASDM version and i want to upgrade to 9.1.7(32) IOS and 7.8.1.150 ASDM version.Since there is no Exempt NAT in this new version because of different syntax and so on, i was wondering...
Hi Guys, I have a Cisco ASA5545 and has configured 4 contexts. Each context contains multiple IPSec VPN configs. I want to see the Preshared keys in clear text (because I don't know the existing keys)But this command "more system:running-config" onl...
Hi, I want to standardise the crypto keys on production environment ASA to 2048, as you can see from below output currently they are of variety of sizes.Also need to change the domain name Please suggest it will affect any VPN or create any other iss...
Hello all, We have an ASA5516 firewall with source fire running 6.5.(2) and we received an alert about a bug has been identified in this version. The alert says that after some time configurations cannot be saved to flash. Do you think i should upgr...
Hello! I have been looking, but have yet to come up with a solid answer on this. We received an ASA5506-X, which has an included control license. From what I am seeing, to get any benefit out of the control license, I will also need a protection lice...
How to Proper way to move old FMC policy and configuration to NEW FMC?
Dear Concern, As subjected i am facing the problem creating site to site vpn between ASA and fortigate. IKEv2 phase 1 is seuccesfully up but phase 2 is not... here is the config crypto ipsec ikev2 ipsec-proposal xxx-PROPprotocol esp encryption aes-2...
Hello all, I am trying to setup Cisco ASA 5510 to allow ICMP protocol from inside to any outside hosts only. I have been able to deny ICMP from outside, however I am unable to allow from inside. Any hints would be much appreciated.
I have 2 new NGFW 4115s with the latest software. From the documentation, it seems you should be able to create multiple cluster container instances on these. But creating a cluster instance only allows a native instance and consumes all CPUs. I can ...
I am trying to configure a FTD1120 and am having trouble with the access list commands. We're not able to configure a management VM, so we're using the 1120's onboard Device Manager. Right now we're just trying to get access out to the Internet and p...
