Hello experts, Could you please explain me the below couple of query? 1. ssh 10.136.100.226 255.255.255.255 outside---- In my asa FW I could see this command. Whether the command is to take the ssh from outside? I tried to ssh into the device with th...
Hi all, I am not sure if a failover can be achieved in such a static setup. The scenario is as follows:Subnets A to G are internal and go through ISP link 1. There is a Zscalerredirect filter applied to the LAN interface of the firewall that picks th...
Hello, We have a remote office that is changing ISP's and just wanted to confirm the steps I would need to take in changing the firewall config for this to work. We are currently running a ASA 5516 and have a site to site VPN from the remote to main...
Will this allow a RDP connection to the 164.64 host to the 192.168. host addressnat (outside,inside) source static 164.64.X.10 host destination 192.168.X.10 host service tcp rdp Thanks
I purchased a new ssl cert for my Cisco ASA 5506. I installed it and there was an exterior scan run against it. The scan failed. Here is the error:SSL certificate is untrusted How do I resolve these error?Any help is appreciated.
Hello! "Cisco Firepower provides full contextual threat analysis and protection, with awareness into users, user history on every machine, mobile devices, client-side applications, operating systems, virtual machine-to-machine communications, vulnera...
Hello Guys I am trying to build a Route Based L2L VPN tunnel between my Cisco ASA running 9.8 Code and Azure CLoud.I have a Basic Idea on the Configuration of the Route Based VPN tunnel. But I would like to know is it possible to Configure ACL's in t...
I'm in the process of acquiring some new FTD's with FMC. But can't find a definitive answer as to whether the FMC can manage ASA configs & logging too ? The company has a large estate of 5525-X without FirePower & a few 5545-X's with.I'm trying to i...
Is there any safe way to test Firepower's IDS policy on a machine to see if the IDS policy is working? I know of the EICAR test for detecting malicious files, but is there an equivalent site we can go to for IDS testing?
Dear , My company has 2 cisco firewalls ISA3000, 2 switches IE2000 and we have 2 WAN lines to Corporate HQ. the request is once the primary link goes down the other is backup to take over.Can someone help to advise how can I configure to meet the re...
Dear all.1. I configured IPS as inline , but when begin testing using nmap it shows as "Would Have been dropped". FMC version is 6.3. 2. Today I saw intrusion event. but this time IPS result wont show anything.Please find screenshot. One of our serv...
Hello We have a FTD managed by a FMC, the RAVPN (Anyconnect) is working fine but we need to activate BGP so it can propagate the segments the FTD has to its neighbors. Today, only the segments the FTD has an interface in it are propagated to the BGP ...
Hi, We have a FPR1010 locally managed with FDM.I need to replace the 1010 with a 2120.I'd like to create a backup of the 1010 and restore it onto the 2120.Anyone know if this is possible before I waste time trying and failing?I think the answer is no...
I want to replace a FMCv running version 6.2 with hardware FMC running version 6.4. FTD sensors are running with version 6.2 and registered with FMCv 6.2.Migration script is available for only version 6.5 so what i have to do is to manually configure...
HiI need to upgrade a ASA 5505 8.2(5) to 8.4 version. I cannot find a .bin file for 8.4 version. can you please help me find and download the .bin file?
