I have a FirePower 8k series appliance that is tied together with ISE pxGrid. Currently, the FP is setup with 2 ports inline on the outside of the firewall(ASA). I have a SPAN on the inside of the firewall that sends trafic to another port on the F...
HI all, I am in a bit of a pickle. I have DHCP server that can 1. Lease IPs to devices in the same LAN2. Can also be pinged (reachable) within the same LAN, However the same dhcp server cannot do the above 2 things to remote site VPN. My setup in su...
Hello! I use ASDM to manage Firepower on ASA 5506-X. I just found that in Configuration > ASA FirePOWER Configuration > Policies > Intrusion Policy > Intrusion Policy my policy is always shown as Policy out-of-date on device. I tried to change it...
Hello All, I have recently applied Smart licenses to the FTDs through the Cisco Software Manager,( the FTD is managed by FMC ) the licenses are applied but from the Software Manager Portal still shows that the Licenses are unused, when i did some re...
Is there a migration tool/method for migrating vpn tunnels from ASA to ASR? Have over 100 sites to relocate...
Hello everyone, I would like to add couple of addresses to existing network list.Once I click edit on the list, I can only delete existing addresses or save the config.I don't see the add option. Please advise.Regards,Daniel
I have two hardware 4150 FTD firewalls configured in a logical cluster...I have been trying to find a configuration guide that shows how an HA Cluster is properly configured and also shows the correct physical cabling of the required port connection...
Im in the process of replacing 5505 and 5506 with FPR-1010. (code: 6.5.0.4). When running IPsec between two subnets for example: FPR-2130 subnet 10.0.0.0/23 <-------> 10.199.24.0/24 (FPR-1010 has IP .1 (BV1) and .2 (MNGT). I cannot access the unit it...
Hello,What is the meaning of the line "CSM_MANAGEMENT_CRED_username" which appears in the file generated after a deployement ? What is its utility ?Thank you,Stephane
cisco FMC deployment of the policy failed -" Bulk Load Error for DE_Config"or " Bulk Load Error for DE_Config"
Hello Experts, Could you please tell the advantage of using Spanned Etherchannel over Device local etherchannel? What are the benefits of one over the other? Thanks
Hello,we have a weird case with asa 5525 - No URL filter in place. When trying to access github.com from any computer from the inside network by using Mozilla or Firefox or SSH command from linux server - it fails. But works fine over IE with no iss...
Hi,I have a file server that is in the DMZ of my ASA5525 firewall. We are getting numerous successful connections from source IPs with Tor exit nodes to our file server and we'd like to block that traffic if possible. I'm told one way to block this t...
Hi Guys If i want to purchanse a FPR2140-NGFW-K9 with Anyconnect, will the below sku be sufficient?? L-AC-PLS-LIC= and in order to manage it can i use the below sku FS-VMW-2-SW-K9 or do i have to get the FMC1000-K appliance
Hi, Do I need to add inspect http and https in global_policy Thanks
