Dear all.1. I configured IPS as inline , but when begin testing using nmap it shows as "Would Have been dropped". FMC version is 6.3. 2. Today I saw intrusion event. but this time IPS result wont show anything.Please find screenshot. One of our serv...
Hello We have a FTD managed by a FMC, the RAVPN (Anyconnect) is working fine but we need to activate BGP so it can propagate the segments the FTD has to its neighbors. Today, only the segments the FTD has an interface in it are propagated to the BGP ...
Hi, We have a FPR1010 locally managed with FDM.I need to replace the 1010 with a 2120.I'd like to create a backup of the 1010 and restore it onto the 2120.Anyone know if this is possible before I waste time trying and failing?I think the answer is no...
I want to replace a FMCv running version 6.2 with hardware FMC running version 6.4. FTD sensors are running with version 6.2 and registered with FMCv 6.2.Migration script is available for only version 6.5 so what i have to do is to manually configure...
HiI need to upgrade a ASA 5505 8.2(5) to 8.4 version. I cannot find a .bin file for 8.4 version. can you please help me find and download the .bin file?
we have ASA pair running as active passive code 9.8.3. whenever we do a failover from active pair to standby the asa reload. it was working fine but started doing this suddenly. no network configuration changes nothing. the configuration are below AS...
I'm currently establishing an IPSec VPN between a 2900 router and an ASA 5525. The purpose of this is to be able to get management access to a couple nodes at the remote site which is where the ASA is. The conflict is that I've learned that I can't...
What is the procedure to use to import a certificate to be trusted for DPI for a Windows 10 machine that is not on the domain? I tried exporting the root-ca from our CA as x509 format and imported that to local computer trusted root authorities, but ...
Hi all,does CISCO ASA support BGP Feature "allowas-in" ou "as-override"? Thanks!
Hi Experts, we are planning to create policy on the basis of source SGT in FirepowerFMC/FTD deployment. Target code is 6.4.0.4. Now we are looking for this deployment scale details. Any pointer is appreciated. Jay
Dears,I met a problem of static NAT, my asa version is 9.6 . The topology:And configuration of devices:[R1]v15.2int g1/0 ip address 10.0.0.1 255.0.0.0 no shutdown===========================[asa]interface GigabitEthernet0/0 nameif outside security-lev...
Scenario is like this:I have site A and Site B. I am trying to get connectivity between Site A and site B by configuring IPSEC site-to-site tunnel. On site-A I am using cisco asa 5510 ver 7.0 and on site-B cisco asa 5500 ver 9.2. In short one FW is r...
We have a ASA 5585 firewall, running version 9.8(2)28 and we saw a strange issue. I configured a new IPsec tunnel, using ikev1. However, our partner was not ready so I configured everything but the PSK. Today, we noticed that an another active was do...
We are facing disconnection issues on the client machine which is connected localy.It has installed client version of application.The Application is hosted on the AWS and when client access the the application from AWS it works fine.But after some ti...
Hello We have an issue on an LDAP AAA authentication as all users on AD are able to login and I need to allow only one group of all the organization.I've tried the memberOf configuration proposed in the articlehttps://www.cisco.com/c/en/us/support/do...
