I have been investigating how to restrict administrative access to FTD firewalls. Our corporate policy requires that we: 1) Enable SSH with Radius Authentication 2) Restrict IP address which can connect to the firewall. When you install FTD on a ASA ...
Forum Posts
Resolved! Firepower to MCLAG switches
Hi all, I have a 2100 Firepower I’m going to use as an internal firewall. I have some switches using multi chassis lag technology across 2 switches. for best resiliency, I want to connect the Firepower to both switches - switch side use MCLAG and the...
Hi All,We have a backup of Cisco 5508X and I would like to restore it to 5516X. Is it possible?Since all the interfaces are the same and we are going to use 5516X on as backup just in case 5508X becomes damage. It is possible to restore the backup fr...
Hello, this is the 5th time that our ASA Firepower has restarted without any user intervention. It is in a critical location in our datacenter. Could you help me please?Following the software and hardware specs : Cisco Adaptive Security Appliance Sof...
On EVE-NG, I am trying to establish an IKEv1 Site to Site VPN tunnel between CSR1 and ASA. CSR version : CSR1000V Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.6(1)S3,ASA Version: ASA5520 Version 9.1(5)16 I have attached the configs and de...
I received a complaint from a user who cannot send from his corporate email account to his Earthlink mail account. After tracing all the steps where a connection could be blocked, I isolated it to the firepower. Apparently Snort believes the server a...
Resolved! FTD 4110 Free trial subscription IPS
Hello! I need to provide a trial to IPS subscription to my customer with FTD 4110.How can I do this process? How much time the actually appliance can use this feature after the subscription and the contract time? Best regards,Tamires AlmeidaSecurity ...
Hi,I am new to Cisco firewalls. We are moving from a different vendor to Cisco ASA 5520s. I have two ASA 5520s running ASA 8.2(5). I am managing them with ASDM 6.4(5). I am trying to setup Active/Standby using the High Availability Wizard. I have int...
Hi Cisco community, Need your help!I am trying to understand the logic for a part in the Intrusion Event Record Field. "Blocked" - Value indicating whether the event was blocked.0 — not blocked1 — blocked2 — would be blocked (but not permitted by co...
HI!We are trying to migrate an ASA configuration to a FMC without FTD installed. When we do the mapping between interfaces and zones, it only lets us assign routed mode zones and we need doing it with switched mode zones, any suggestion?The FMC versi...
Resolved! Cannot Access ASDM in CISCO ASA 5505
Hi All, I'm using CISCO ASA 5505 Firewall this is new one and I also new to this feald, my problem is cannot access ASDM using web browser please help me to fix this problem, this the sh run command details, ciscoasa# sh run: Saved:ASA Version 8....
I have attempted to perform a password reset on the Cisco ASA 5506 in Packet Tracer. I am not able to use the Esc or Break keys to interrupt the boot sequence and get into Rommon mode (I have also tried Cntrl-Break and a few other key combinations)....
Hi experts, I'm newbie with ASA firewalls. I have an ASA 5506-X with version 9.9(2)27. I'm trying to do a very simple configuration, two interfaces with one network on each one. The ASA is in routed mode, and I'm able to connect from a machine "A" fr...
I have a network with active directory domain and RedHat IDM domain. The one way trust establihed between domain.Ad users can login in Linux Workstations. Active director have installed agent. Windows workstations works fine. On linux machines netbio...
Hi,we are trying to decrease the number of deny logs logged in our SIEM.The approach is to disable message 106023 and to log only 106100, by adding "deny ip any any log" at the end of all access lists. This way we are receiving summarized deny logs i...
