Every since I upgraded FMC from 6.2.2 to 6.4, VPN users show as unknow user. I have a case open with TAC with no resolution yet. Any thoughts? I think it's occurring with multiple clients for I just tested another one. Also, any recommendation for a ...
Forum Posts
We currently use an FMC 4500 in our Region that manages our ASA 5545X SFRs that are at our branch offices. We want to use the URL Filtering function on the 5545X at the branch office level. I think we are ok here... The question is the SSL Inspection...
Resolved! How to get Control License for ASA 5506
Hi everyone,I am having a hard time getting license for a new ASA 5506-X.I got the PAK then enter it Product Registration page at Cisco.com. I have reached Step 2 as showed in the picture, I am trying to get a license but it asked me to enter License...
Hi All, I am trying to figure out if we can multiple security zones on same etherchannel. For example: inside & DMZ We have 8 ports on the ASA(standalone) and was thinking to create either one of following. 1- create 2 ports etherchannel for Inside ...
Hi,I have a site-to-site VPN with one of our vendor. Since they have similar n/w with our internal network, we are using NAT in ASA. Now the vendor is moving to Azure and using the same network (local). They are replicating their servers from on prem...
Hi I want to bypass SSL decryption for few websites like Google, Apple, YouTube using DNs. How can I add that if certificate issued to Organization is Google LLC then do no decrypt? I tried O=Google LLC, didn't worked. I tried CN=*.google.com didn't ...
Hello, we have two internet connections terminated on our 5506-X FTD managed through our FMC. Connected to our FTD is a Cisco 4331 router we are doing a DMVPN connection over the primary internet connection to our corporate HQ. The tunnel source inte...
Hello All,i have recently installed two FTDs and they are working as HA, the FTDs manged by FMC and will go live today but when i want to deploy something from the FMC and i cannot see the devices or the HA peer on the deployment tapt, this is just h...
HelloI am about to migrate a Cisco ASA (Active Standby Cluster) to Firepower.My ASA Cluster has L2L VPN Tunels (Policy based and Route Based) and Extended ACL's applied to different interfaces for Multiple Clients Traffic.I am looking for Best Practi...
Resolved! Cisco Firepower 2130 Threat Defense
I have the new generation firewall Cisco but I have two questions?a) Is normal that the deploy is too slow ?b) How to monitor VPNs? The versión IOS is 6.5.0. thanks for you help me!
Hello, Do anyone have documentation on how to configure a firepower 4300 FTD as a SDA fusion firewall? Thanks
Hello,I have noticed that suddenly all the Source Fire Connection Events not showing/recording.If i try to expand the time window i can the last data shown will be since 03 Jan 2020I have changed the Maximum Connection Summaries in Database settings ...
Hi All, Would like to get recommendations from you on ASA Security level and traffic flow. Have two scenarios. 1) ASA Firewall with Three Interfaces. Interface Gig0/1 : Outside (Security-Level 0)Interface Gig0/2 : Inside (Security Level 100)I...
HelloWe just installed an ASA 5516-X to productions as an east/west routed firewall. It is Firepower Threat Defense 6.4.0.4-34 managed by onboard Firepower Defense Manager.The DHCP server is 192.168.5.21The inside of the ASA is 192.168.5.1The outside...
Hello, Hello, we have a topology similar to above. The ASA has a private AS of 65001, and is using the local-as 2322 and and remove-private-as BGP parameters, but the router is still seeing the private AS, 65001 when you type show BGP. Is there a co...
