Hi Experts, When using NAT-T, we're using Private address in the "match identity address" command. If we replace this private IP with the Public IP (1.2.3.4), the tunnel doesn't come up.Can someone please assist how NAT-T working in the match identi...
Hi, I am trying to configure Dual ISP feature in ASA 5506-x, like the one which is available is ASA 5505 with two different outside interfaces. e.g. outside1 and outside2However, on ASA 5506-x every time when I configure NAT statement for the outside...
Hey Guys; Hopefully I can get some help here with this issue; as my head is spinning around in circles in trying to figure this out; long story short. My friend and I are doing a site 2 site vpn using a 1900 cisco router >>> Cisco Fw >>>> Vpn Net. I ...
Hi I have ASA 5525 i wanted to configure FTP server behind NAT. My IP address information is as follows outside public IP :- 196.188.30.65 Inside LAN :- 172.31.0.0 255.255.255.0 FTP Server:- 172.31.0.11 Regards,
Let me preface by saying that I am a beginner and do not have a lot of experience with firewalls. I have a Cisco ASA 5506-x running ASA Ver 9.8 and ASDM 7.8 Firewall mode is set to routed. My goal is to be able to rdp into any machine on the insi...
Hello, I have a couple of web server in my network which accessible from outside also from inside, I am trying to force on vlan to access this servers from outside, but whenever the request from this vlan hit the FTD it resolve the egress interface...
hi, i got locked out on a new ASA 5555-X running in multiple mode when i applied AAA on the admin context. i tried to reboot the primary/active but got stuck troubleshooting the secondary standby. so i did a password recovery. but after issuing boot,...
Hello guys! Does anyone know how to configure Cisco FTD for multiple interfaces to do ECMP? In my scenario, I have an FTD being managed by an FMC, and I need to configure ECMP with two links from the FMC to implement in FTD. I know the ASA cisc...
ASA only can browse but After applied sfr , can not browse if it is state firewall , do I need to allow from outside port 443 to inside private network or NAT address?
running Cisco_Firepower_Mgmt_Center-6.3.0-83-Restore.iso and S09database-init takes long time; have anyone seen this?
Hi, I've published a new FTP over TLS server with Windows 2012 R2 and behind an ASA 5515-X. I'm using Passive mode so I configured ports 21 and the range for PASV to permit FTPS traffic. These are the results: ASA outside IP (Labs network) is x.y...
Hi All, I have been running into an issue with setting up rules in FTD specifically involving URL Filtering. If I create a rule set like below: Seq | Source int | Dest int | Source Add | Destination Add | Port | URL Categories | Action 1 ...
Hello All. Looking for some help with a S2S VPN tunel. The Phase 1 is up but I am unable to pass traffic, cant seem to find the issue. Here are my configurations, any assistance would be helpful. Here is my spoke ASA 5505 config.ASA Version 8.2(5)!ho...
Can you still give the mgmt interface and IP address and use it for out of band mgmt ssh access even though the ASA has an SFR module?
Hi All, I am planing to replace our existing firewall and fortigate with CISCO 5525x, currently both are used only for internet trafficfirewall is just for security and the fortigate manages the user data usagewould like to know if it is possible to...
.jpg "Hall of Fame Community Legend"){kind=icon}
.jpg "VIP Master"){kind=icon}
