I have two hardware 4150 FTD firewalls configured in a logical cluster...I have been trying to find a configuration guide that shows how an HA Cluster is properly configured and also shows the correct physical cabling of the required port connection...
Forum Posts
Resolved! FPR-1010 - IPspoof
Im in the process of replacing 5505 and 5506 with FPR-1010. (code: 6.5.0.4). When running IPsec between two subnets for example: FPR-2130 subnet 10.0.0.0/23 <-------> 10.199.24.0/24 (FPR-1010 has IP .1 (BV1) and .2 (MNGT). I cannot access the unit it...
Hello,What is the meaning of the line "CSM_MANAGEMENT_CRED_username" which appears in the file generated after a deployement ? What is its utility ?Thank you,Stephane
cisco FMC deployment of the policy failed -" Bulk Load Error for DE_Config"or " Bulk Load Error for DE_Config"
Hello Experts, Could you please tell the advantage of using Spanned Etherchannel over Device local etherchannel? What are the benefits of one over the other? Thanks
Hello,we have a weird case with asa 5525 - No URL filter in place. When trying to access github.com from any computer from the inside network by using Mozilla or Firefox or SSH command from linux server - it fails. But works fine over IE with no iss...
Hi,I have a file server that is in the DMZ of my ASA5525 firewall. We are getting numerous successful connections from source IPs with Tor exit nodes to our file server and we'd like to block that traffic if possible. I'm told one way to block this t...
Resolved! FTD and Anyconnect Licenses
Hi Guys If i want to purchanse a FPR2140-NGFW-K9 with Anyconnect, will the below sku be sufficient?? L-AC-PLS-LIC= and in order to manage it can i use the below sku FS-VMW-2-SW-K9 or do i have to get the FMC1000-K appliance
Hi, Do I need to add inspect http and https in global_policy Thanks
Hi All i have FTD 4100 series and customers are complaining whenever they try to access the website the web-page loads well however when they try to navigate through the pages there is request timeout and since i am security admin i want to make sure...
Hello community, I dont know what else to try in order to troubleshoot this, recently i noticed a lot of messages for ICMP error in our syslog and I dont know how to avoid the errors. Sep 19 2016 16:53:19 : %ASA-4-313005: No matching connection for ...
Resolved! No matching connection for ICMP error
I'm seeing this on our cisco pix 515e firewall log quite often:Sep 1 13:42:52 192.168.120.248 %PIX-4-313005: No matching connection for ICMP error message: icmp src guest:192.168.0.10 dst outside:8.8.8.8 (type 3, code 3) on guest interface. Origina...
Packet drops on Firepower inline-set Interface..We have setup where having 2 JUNOS Active/Passive firewall connected to Cisco VSS switchwe placed the 4150 IPS in between with 2 Inline-Set with ACL policy allow all and un-checked "Drop when Inline" an...
Hi guys, I am starting to study for CCIE security and trying to install the FTD virtual appliances. No matter what I try or what version I use it always crashes. IT goes through the installation and gets to a certain point and displays an error about...
Resolved! Cisco ASA Stateful Failover
Hi Team, Greetings for the day...!!! I have two below questions for Cisco ASA & Cisco NGFW stateful fail-over. (1) Stateful fail-over in Cisco ASA also replicates all live entries of VPN (Site-to-Site IPSec and Remote-Access VPN) along with Xlates/C...
