Hi,I have the ASA with address range 172.26.0.10 - 172.26.0.200 configured as dhcp serverI have configured a PC on the inside network with a manual static IP address 172.26.0.3 that is not in the range of the dhcp server. To access the PC from the In...
Forum Posts
Hi all,just looking for some design guidance and best practice on configuring the FTD/ASA VPN split-tunnel ACL with VPN-Filter ACL.I have a corporate network that is on the 10.0.0.0/8 network. And I want users access most of the corporate network thr...
Resolved! FTD 5516 Certificates for Anyconnect
Hi,I have a ASA 5516-x running FTD 6.4.0.6.I'm using https://www.cisco.com/c/en/us/support/docs/network-management/remote-access/212424-anyconnect-remote-access-vpn-configurati.html as a guide to setting up a client to site VPN connection.In section ...
Hello All,Please I need help.After configuring an ASA5506-X one PC on the LAN can't connect to the internet.I have disabled proxy arp on inside interface, to avoid a possible ip address conflict. I also did some traces, like below. ASA declare all Al...
Resolved! Firepower 2140 VPN Support/Licensing
We just purchase a couple 2140 NGFW's with Threat and Malware license subscriptions. I noticed there is a RA VPN license activation that is showing by default as disabled by user. Without buying additional licensing with the base license and Thr...
I have to configure Site to Site VPN on Cisco Firepower 4100 with FTDs .... does Site to Site VPN require any licensing ?Also, does multi instance FTD support Site to Site VPN ?
Hi, Need some advice please. I have 2x ASA5516-X firewalls running in active/standby HA and running eBGP with a service provider. The provider have two CPEs on site, connected via a common subnet with the outside interfaces of the firewalls. We ne...
HiI have FMC 750 connected to SFR on ASA 5555, I have some rules to filter internet usage in my network, one of these rules Blocking (whatsapp media messages).I removed it from the rule with saving and deploy it, but it still block it.Any solution??
Hi all ,I need you help please ,Briefly , I have two FMC 1000 ( HA ) and I have to upgrade them from current 6.2.2 to 6.2.3.I got the upgrade image from Cisco Website and I upload the package to Standby FMC System >> Update >> Upload >> ( I got the ...
Hi everyone, I couldn't find anything too definitive around whether or not FTD devices need access to internet and if so what specific URLs etc? Do they support proxy? I'm assuming that if we're using FMC to manage everything, licensing and other u...
Hi , Good day.I just seen a mac flapping issue at client's Core switch. Nov 22 06:07:23.913: %SW_MATM-4-MACFLAP_NOTIF: Host 20cf.30ab.a02d in vlan 1 is flapping between port Te2/0/9 and port Te1/0/37Nov 22 06:07:25.952: %SW_MATM-4-MACFLAP_NOTIF: Hos...
Hi,how change nat rule position in ASA(9.1.2) without deleting it? I tried to reenter nat rule with new position but no success. Thanks in advance
Resolved! USER-IP mapping FTD
Hello, I understand that in order to Integrate FTD with ISE we need to perform PXgrid integration and add Active directory as a realm, which works well. What about the users performing Dot 1x authentication using ISE local Database, How does FTD ...
Hello Everyone,I have a C881W and cannot communicate through port 987 from the public Internet. I have the following commands in my firewall and I can communicate on all other ports in this list.permit tcp any any eq 987permit tcp any any eq wwwpermi...
Hi.. We have firepower FW that is used to filter the VOIP traffic to our telephony platform.When we are troubleshooting voip issues it is good if we can dump the SIP and RTP on the firewall.We can do this from the FMC but the buffer is limited to 32 ...
