Dear all, Please advice, what are possibilities. AsIs situation: ASA with webvpn configured on outside interface. This is pretty standard solution which is working for many years. ToBe situation: add possibility to connect via VPN client on inside in...
Forum Posts
Resolved! FMC upgrade from 6.2.3.10 to 6.4.0.7
Hi All,I am planning to upgrade my vFMC from 6.2.3.10 to 6.4.0.7. Is it a direct upgrade path or do I need an intermediate upgrade to go this version? My exact plan to migrate the vFMC to Physical Appliance which is currently running 6.3. Do I need ...
I have above fire wall and If I want to use this firewall with the Cisco ASR 1002-HX which comes all SFP+ Ports I need to change the Module SFP+ in the ASA5545-FPWR-K9. please advice which one is the model # should I look for it.
Is user based web browser authentication with Active Directory possible with url filtering in ASA5545-FPWR-K9 firepower.
Resolved! Do not decrypt bypass rule for domain
Is there a way to create a do not decrypt rule for a set of domains or FQDNs? I do not see a URL tab in the the SSL ACP. Running 6.4.0.4 fmc. Closest alternative is to either know the destination IPs or hope the application tab has a match.
We have Cisco ASA 5585-X with SSP-40 who CX module is defective and there’s no further upgrade for the same. We are planning to deploy Firepower 2130 below ASA as dedicated IPS box. (Architecture attached) We are very much concerned that what will be...
So we have a brand new ASA5506 in a remote office. We configured a ikev2 ipsec tunnel to connect to the head office. The tunnel is up and working fine. There is a switch connected to inside and a /30 subnet between it and the firewall. We can access ...
Hi, I'm trying to reimage ASA5506 from FTD 6.0.1 to ASA software, but meet problem. The ASA5506 stuck in reload loop. rommon 0 > show infoCurrent image running (0/1): Boot ROM0Cisco Systems ROMMON, Version 1.1.8, RELEASE SOFTWARECopyright (c) 1994-20...
Resolved! Deploying NGIPS 4110 as IPS-ONLY in HA ?
Hi , As my understanding it will support in both routed and Transparent mode ?What will be the benefits using Routed mode ? or which one should i choose ? We are using this appliance only for IPS and will configure HA between the devices ? #ngips @s...
On 6.2.3, when I logged in to SFR Module, I would land in user mode ">"Now it lands me in priv mode "#" I can't use commands such as show managers, show network etc.
Hello , I am trying to connect ASA firewall to a switch as firewall on stick pc1 (Vlan 10) --------- switch ----------- ASApc2 (Vlan 20 ) --------- int g0/0no ip addint g0/0.10vlan 10ip add 10.10.10.1 255.25...
hello to every one,i want to create acess list that prevent the truffic from the internet to my organization.i do it in the packet tracer . !!ip access-list standard no-entrydeny any!and i doit on port g/0.10.and the access list block the internet fr...
Hi all, I cannot seem to ping server in dmz from "OUTSIDE" (Static Nat). However, I can ping Outside from inside (PAT).Could anyone point me to the right direction please? object network INSIDE-OUTSIDEnat (inside,outside) dynamic interfaceobject net...
Cisco Systems ROMMON, Version 1.1.15, RELEASE SOFTWARECopyright (c) 1994-2019 by Cisco Systems, Inc.Compiled Sat 03/30/2019 7:00:46.51 by wchen64Current image running: Boot ROM0Last reset cause: PowerOnDIMM Slot 0 : PresentDIMM Slot 1 : PresentPlatf...
I am running ver 8.2 on cisco ASA 5505interface VLAN1nameif insideIP address 10.1.1.0 255.255.255.0 interfacve VLAN2nameif outsideip address DHCP setroute outside subnet 192.168.0.0 255.255.255.0I would like to configure so that only one client 192.1...
