hi all,just a quick one. what's the 'best' and practical way of resetting an ASA?this is to help me configure the box from scratch.is it by using the write erase or config factory-default command?can elaborate between the two and which is more common...
I am looking into deploying a ASAv in AWS but it has to be FIPS 140-2 certified. I have searched all over the net and found nothing showing the ASAv is or is not FIPS compliant. Does anyone know where this documentation can be
I need help on how to check this error on my cisco router ISR 4331. and why it's appearing on my router logs. Thanks Apr 7 10:30:25.272: %PLATFORM-4-ELEMENT_WARNING:smand: RP/0: Committed Memory value 91% exceeds warning level 90% Version: Cisco ...
I am trying to view a specific line count of access lists on the ASA. Current if I run show access-list inside_access_in I can't specify the line I would like to filter on. I'm trying to view all hits on ACE (access list entries) on line 2. So i'm ru...
I am trying to get better clarification on when to use which of these?FTD url object vs fqdn network object
Hi Team, Can someone please let me know why I would see Total output drops increasing on this interface. My issue is that there is a packet loss on traffic that travels via this interface. Could this be the reason? I don't have QOS enabled. SW3#sho...
I have a hub and spoke environment with a bunch of ASA 5506-X devices. I was under the impression that for a site-to-site VPN between a user (behind a residential internet connection) and my public IP hub ASA, that the private space ASA would require...
Hello everyone, I did search thoroughly for this specific question and could not find an answer. I am sure it is out there somewhere but if someone here could help me out, it would be greatly appreciated. I have numerous ASA 5506-X devices in a hub-a...
Hi, I need to contact a remote LDAP server via the inside interface.this remote LDAP server is reachable via an IPsec tunnel and due to network overlapping we are natting source addresses before they passthrough the VPN.Is it possible to nat the insi...
Hi all I've got a new ASA Firepower which replaces an other old ASA. The old one has various IP Audit Policies configured, but I think for legacy reasons. What is the default today in regards to IP Audit? Is this enabled by default or not? What are...
Hello I can not filtering more then one SID in intrusion policy. Can I search multiple SID? I have tried , : AND nothing worksalso can I select more category in one filter ? thank you for help Radek
Hi I have a question about difference between the following products: FPR4140-NGFW-K9FPR4140-NGIPS-K9FPR4140-AMP-K9 I want to order the 4145 Firewall, but in "built and price" there isn't FPR4145-GFW-K9 part number.is FPR4145-NGIPS-K9 the same as FPR...
Hi Today i found out that ASA5545 CPU went to 60% and it was all consumed by the DATAPATH-0-2326 process. I could lower it to 30% by removing a capture process that wasnt removed by ASDM after the program close.The average CPU usage three days ago wa...
Hi,ASA 8.3Anyconnect users can reach INSIDE, but not DMZ. Dmz host 10.120.1.2 is what I am trying to reach.Packet-tracer shows it should be possible. Attaching my asa config.What am I missing?¨Packet-tracer:asa-kalasa# packet-tracer input vpn tcp 172...
Good day all, Currently we have deployed Cisco FMC 1600 with FTD 1020 and 2100 in HA respectively. We are running version 6.4.0.4. The FMC has been configured to sync time via NTP and is showing the correct time. The FTDs have been configured to pu...
