Hi Guys, I have a Cisco ASA5545 and has configured 4 contexts. Each context contains multiple IPSec VPN configs. I want to see the Preshared keys in clear text (because I don't know the existing keys)But this command "more system:running-config" onl...
Forum Posts
Hi, I want to standardise the crypto keys on production environment ASA to 2048, as you can see from below output currently they are of variety of sizes.Also need to change the domain name Please suggest it will affect any VPN or create any other iss...
Hello all, We have an ASA5516 firewall with source fire running 6.5.(2) and we received an alert about a bug has been identified in this version. The alert says that after some time configurations cannot be saved to flash. Do you think i should upgr...
Resolved! ASA 5506, and included Control License
Hello! I have been looking, but have yet to come up with a solid answer on this. We received an ASA5506-X, which has an included control license. From what I am seeing, to get any benefit out of the control license, I will also need a protection lice...
How to Proper way to move old FMC policy and configuration to NEW FMC?
Dear Concern, As subjected i am facing the problem creating site to site vpn between ASA and fortigate. IKEv2 phase 1 is seuccesfully up but phase 2 is not... here is the config crypto ipsec ikev2 ipsec-proposal xxx-PROPprotocol esp encryption aes-2...
Hello all, I am trying to setup Cisco ASA 5510 to allow ICMP protocol from inside to any outside hosts only. I have been able to deny ICMP from outside, however I am unable to allow from inside. Any hints would be much appreciated.
I have 2 new NGFW 4115s with the latest software. From the documentation, it seems you should be able to create multiple cluster container instances on these. But creating a cluster instance only allows a native instance and consumes all CPUs. I can ...
Resolved! ACL Support on FTD1120 Using FDM
I am trying to configure a FTD1120 and am having trouble with the access list commands. We're not able to configure a management VM, so we're using the 1120's onboard Device Manager. Right now we're just trying to get access out to the Internet and p...
Is it possible for Firepower to detect data loss via dns tunnels? Such as what infoblocks can do? Thanks in advance
Hi, Just setting up a new 2100 but unlike the 4100 the default management address opens up the FDM and not the Chassis manager. even though I have data interfaces connected and enabled the interface on the GUI it's still in amber color in the GUI...
Hi all, I'm pretty green with the Firepower line, but have a decent amount of experience with the ASA/PIX lineup (Plus CheckPoint & PA). I'm having a bit of difficulty getting SNMP working on a HA pair of 2110 I'm commissioning. I have basic connecti...
Resolved! Reach public IP on 2nd WAN interface
Hello,I have a question about a cisco asa 5525X where I'm using two WAN Interfaces (WAN-1 with ip 111.111.111.111 and WAN-2 with IP 222.222.222.222) with policy based routing with route-maps.VLAN 45 is going out over WAN-1 but the clients in this vla...
dear allI configured TID on my firepower and installed approximately 29,000 observables. In order to test it I changed status of one of the observables from Monitor to block. Then I entered malicious site (taken from observables) but firepower didn't...
Hi there! We have HQ with with 4 branches, there're ASA HA (Active/Standby) in every location, and HQ and 3 branches are connected via MPLS and only one branch connected to HQ via site-to-site VPN. We're planning to upgrade ASA firmware to 9.12.As I ...
