Hi, I have console and management (eth0 port which is labeled as '1') connections to 2 FMC 1000 devices. I am working on getting these configured. I can get to the console connections for both. However the management connection on device 1 takes me ...
Forum Posts
Subinterface was configured on Portchannel interface of FTD device. When I trying to remove it I getERROR: Remove failover mac address configured on this sub-interface firstFound this bug CSCvo58030. The problem is I don't have any failover mac addre...
Experts, Do you know how many split routes the client can support when asa and anyconnect do SSL VPN? A previous version had a limit of 200. How many can be supported after the upgrade has not been described in the documentation, please give pointers...
Resolved! Cisco ASA + NAT Configuration
I have Cisco ASA & below is the sequence of existing NAT. nat(inside,outside) source 1.1.1.1 2.2.2.1nat(inside,outside) source 1.1.1.2 2.2.2.2nat(inside,outside) source 1.1.1.3 2.2.2.3nat(inside,outside) source 1.1.1.4 2.2.2.4nat(inside,outside) sour...
I was just able to get vulnerability scanning for a vFMC suite with 2110's started and it's calling out the SSL Certificate cannot be trusted. This and a few others relating to the same thing. The FMC has a valid certificate, but the scans are pi...
Resolved! Allow Traffice Between VPN Users
Hi Experts, In order to be able to establish sofphone calls from one VPN user working from Home to another VPN user working from HOme too, I need to enable the traffic between VPN users. I have ASA 5515. My understanding is that I need to add a NATna...
Resolved! AnyConnect Split-Tunnel Configuration
We have a website that is accessible on the Internet and only allowed to be accessed via our public IP. We need vpn users to be able to access via anyconnect when they are not in the office. To accomplish this, do I just add the IP of the website int...
Resolved! Fortigate200E-Cisco 3850 Switch -LACP
Hi all , The 200E does not appear to have the Hardware switch option like the 100E's on which I was able to just allocate an internal ip (hardware switch) and I can get access to the switch without any more configurations.I need an internal network ...
Need your help on this issue on the ASA5525. QMS-BRC-DAAS-ASA5525# show processes cpu-usage | include DATAPATH - - 85.2% 76.0% 72.9% DATAPATH-0-1903 QMS-BRC-DAAS-ASA5525# show processes cpu-usage | include DATAPATH - ...
snmp-server group NMS-Bulletproof v3 privsnmp-server user BulletproofSNMP NMS-Bulletproof v3 encrypted auth sha ad:1c:9e:1a:f4:7a:9b:ce:cd:91:23:9f:cf:2e:e6:e9:80:57:99:5f priv aes 256 5f:e5:44:97:30:ea:25:44:ba:54:12:0d:69:be:96:c1:20:34:99:42:21:a3...
CVE-2018-0101 - ASA 55169.9.2.1 is not released yet as per cisco so I upgraded to 9.12.3 but getting CVE FAIL test from PCI Scan. Any sugggestion
We have a system in our DMZ which regularly hangs and the supplier have told us it's because we're NAT'ing the source address into the DMZ and the server can't handle so many connections coming from a single source address. Their recommendation is to...
We upgraded from ASAs a while back and when transferring policies and objects over to the new system, many, if not most of the items took a generic name, such as "DM_INLINE_xyz" or "Outside_connection_#xxx", which makes it diffult to know what the po...
Hello Who could tell me how to be sure whether this IPS event (MALWARE-CNC User-Agent known malicious user-agent string AutoIt ) is false positive. I get this notification very often. Device : firepowerTimestamp : 2020-03-30 10:18:53Protocol : tcpAle...
Resolved! TFTP ASA Image
Current error I'm getting, not sure why.ciscoasa# copy tftp flashAddress or name of remote host [10.0.0.220]? 192.168.101.150Source filename [asa917-32-k8.bin]?Destination filename [asa917-32-k8.bin]?Accessing tftp://192.168.101.150/asa917-32-k8.bin....
