My question is how we allow VPN traffic via the outside interface but block internet traffic that happens to have the same source address as the remote VPN network ? If you disable the bypassing of interface access lists on an ASA using the "no sysop...
Forum Posts
My Internet FW has moved to a FP2130 box. Can anyone point me to an example of how to configure my WSA to communicate WCCP with my FP2130 . I am reading that I would have to use "FLEXCONFIG"?? on my FP box?? MY FP box is running 6.2.2. thanks for any...
I followed this guide about 6 months ago for configuring our ASA with a redundant backup ISP. https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118962-configure-asa-00.html At the time it worked great and...
Resolved! Firepower Management center license
All, Have 2 5525 ASA's with Source Fire with URL/IPS and AV license for both SF modules planning to bring in a firepower management center virtual appliance to mange SF modules for HA could advise me on the license that I need to purchase
Resolved! Restrict management to a specific device
Hi, I want to create user roles that let me create users that's only allowed to mange a specific device. This is a setup with one FMC that mange multiple devices on local sites and where we want the local IT group in each location to only have acces...
Dear All,We have two ASA 5580 in fail-over mode. Our users connects to VPN using Anyconnect.This VPN login is authenticated from AD (For domain users: who logs in to domain) But there are such users in AD who does not log into AD but uses VPN to con...
Hello all, I'm a beginner in firewall devices, and I hope you can assist me on this issue. As you can see below, we have setup logging on both ASDM and a remote syslog server.If I view in ASDM, I see that syslog ID 106100 is logging, along with other...
Hi there,Firewalls located 30km away from each other and linked via optical fibre. Mode: Active/Standby.I am using 5545 firewall pair. Failover working fine with single fibre link / port from each side.For resiliency, I want to add two fibre link for...
I'm testing out FDM. So far, I love it!!!! However, when I apply an intrusion policy to an access rule.... is there a way to make it so the intrusion policy is passive? So it does NOT drop? So treating it more like an IDS. I see I can go into the Int...
Hi all, On a new PC with Windows 10 and latest java (1.8.0_77), ASDM 1.7 is unable to connect to any firewall. Error "java.lang.NoClassDefFoundError: Could not initialize class jdk.nashorn.internal.parser.Lexer" is caused by java.security.AccessCon...
Resolved! Problem with disk free space.
I use FirePower 7100 (Version of sensor 5.3.0.3 Version of FireSight 5.4.1.7).I have problems with applying policy to device.And can not update sensor for more new version. Cisco Support Community helps me! Thanks! They and I think that problem may b...
Hi,Can you activate a Security Plus License on ASA 5525-X with VPN Premium already activated on?
Hi All. I have a Cisco FMC V6.4.0.6. After upgrading to this version, I didn't have any problem. but after a while(about a few hours), that Product Updates Widget doesn't Work(nothing Show). How can i troubleshoot(for example some command in FMC linu...
Hi All.I Have a Cisco FMC V6.2.3 VM on an old Host with ESXi V5.5 and I want to Move this VM compeletly to another physical Host ESXi V6(make OVF and ...). is there any risk for this movement? what happen to Licenses and Policies? Best RegardsSina HR...
