Enabling our customers to leverage their install base and take them to the next level with Cisco Secure Firewall Threat Defense has always been a key priority. The migration tool is available for download to migrate the configuration on the on-premi...
Forum Posts
Recently lost the ability to SSH/ASDM into the active ASA - any suggestions ?CS-FW1/stby/sec# sho run | i sshaaa authentication ssh console LOCALno ssh stricthostkeycheckssh 10.50.0.0 255.255.0.0 insidessh timeout 30ssh key-exchange group dh-group1-s...
How can I capture all drops to one host that are being dropped using the type asp-drop. I know I can use the keyword all. But this gives an overwhelming capture of packets...
Hi team, Kindly help to advise us on the policy migration case below: Our customer is using CheckPoint with the Mgmt Server ver R80.20 and the Gateway ver R77.30 From those link below: https://supportcenter.checkpoint.com/supportcenter/portal?event...
hi all i want to send the firepower user-ip-mapping informations as syslog to Palo Alto, and then we will use the syslog parser to get usernames in Palo Alto. how i send only user traffic or user activity logs as syslog on FMC or Sensor ? Thanks for...
I have been handed over an FMC managing an HA of two logical FTD Devices. However, there is no Platform Setting Policy defined in FMC for these FTD Devices. If i add a Plaftform Setting Policy now ..can it cause any error or downtime ? Thanks
Keep seeing this in the Syslog for my Cisco ASA 5506-X: %ASA-2-106016: Deny IP spoof from (::) to XXXX::X:XXXX:d327 on interface inside_3. Repeats 3 times in a row at what seems to be random intervals. What does this mean? From what I understand, it...
Is it possible to have more than 5 simultaneous SSH-connections at the same time? Can this be changed?
Hi everyone, We have deployed a pair of 2100 in place managed by FMC back in 6 months ago. We also have some subscription to Cisco for malware and antivirus..etc.My boss just mentioned one CDN provider...which they introduced some of the security or ...
Resolved! FMC renewal
Dearsi want to renew subscription of TAMC for ASA5525 with firepower services, i have 2 no's with active and standby fail over, when we installed new at that time i purchased a virtual FMC for 2 devices now it is a renewal time do i have to do any re...
Hi there, we administer our firewalls in CSM. I created a backup of a context before doing a change, and now I'm in the situation where the admin context I use in CSM is not seen as part of the device, and the backup one is. I want to delete the b...
in this picture , we are seeing a scenario for ASA firewall . i'm gana ask a question for youe.. can we have one ip address with two mac-address on outbound interface ? if the answer is positive , how?there are two context , ctx1 and ctx2 on firewall...
Hi Team,we are using Solar winds monitoring tool and enabled NetFlow in ASA. everything is working perfectly expect bandwidth utilization is showing spikes. as per analysis there is no possibility for this spike because in the ISP side monitoring too...
Hello. My customer is having an issue where one of their public IPs is being blocked by spamhaus. All of their mail servers have their own static NaT setup and are not being blocked, ,so we are trying to identify what other device(s) are sending SMTP...
Resolved! "show" command in CLI on FMC 6.3
Hi, I have FMC1000 appliance which running on version 6.3. I would like to verify hardware infomation of the FMC via CLI such as NIC, CPU cores, Memory, Event storage space and power supply status. Unfortunately, I have found only "show version" to e...
Hi all, I have a 4110 cluster which I am trying to troubleshoot a load balancing issue. Two commands that I see frequently applied to CCL and CDL port-channels are: ! int po1 desc CDL port-channel load-balance src-dst ip-l4port port-channel spa...
