Hi all,I think i have a simple question but can't find a solution for it yet.Consider the following topology:We have a IPsec tunnel between ASA1 and ASA2. The traffic through the tunnel is the AnyConnect Subnet (192.168.10.0/24) and the LAN behind AS...
I am trying to authenticate SSH connections via RADIUS, but I cannot get my ASA to connect to the RADIUS server (AD DC w/ NPS) despite the fact that the server is local to the inside interface. The ASA IP is 10.10.10.1 and the RADIUS server IP is 10...
can i disbale ips events in my syslog messages the one with sfims tag
Hello community,I have to migrate my 14 HA pairs of FTD from a FMC2000 to a HA pairs of FMC2600.Both the platform have the same version 6.4.0.4. From the FMC Configuration Guide I read that the Import/Export could copy these configurations from a pla...
I am running software version 6.2.3.6 of Firepower and version 2.3.10 of the firepower user agent. What I am seeing is for some users the initiator user is showing up as UNKNOWN when querying a user under connection events. If I go under Host-->Hos...
Hi everybody!I have a problem: I configured two ASA 5512-X devices in Active / Standby mode. However, when I configured the management interface 0/0, I assigned the IP to the interface and said "ERROR: Cluster pool must be specified on this interface...
Hello,we operate a web and a mail server behind an ASA 5512 cluster.Recently we have received many requests (500 connections per second) to our IP addresses on legitimate ports (25, 80, 443, ...).The requests come from different IP addresses, but mos...
Hi, I am looking for help with my NAT configuration on Cisco ASA 5516-x with Firepower services connected to FMC. Our local subnet LOCAL.NET.0.0/16 already has an Internet connection, with public IP XX.X.228.50. To obtain it I created typical Dynami...
Hello,I have a environment with two Cisco ASA as screenshot follow. I´m trying establish a IPSec VPN Tunnel between 10.10.10.2 and 10.30.30.2 but unsuccess.all routing it is working and each ASA ( ASA01 and ASA02 ) are able to ping each other.The poi...
Hello all, I'm new to the whole FMCv with FTD setup so bear with me... In production we have an FMCv running 6.2.3.2 with two FTD2120s in HA pair running the same version (6.2.3.2). I am looking to upgrade the FMCv and FTD's to the latest starred ver...
Hello, I have couple of queries for configuring remote back up from FMC , Appliance to remote location. As per the attached image ( Create_Backup ) , for the "Back Up Configuration" option which configuration it is referring to ? Is it FMC Interface ...
What purpose doe the AD join serve when creating a realm with the FMC? It seems to be the only difference between AD and LDAP is the AD boxes. Since AD is LDAP, why is there even two choices here? Why would I use one over the other?
Hello everybody,I'm trying to find out where to specify IKE Phase 2 Lifetime duration (IPSec lifetime)? Under objects, you can only define lifetime for IKE Policies - Phase 1.Software version is 6.3 and configuration is being done via FDM. Appliance ...
I have 2XASA5585-X firewalls in active/active failover mode, with 30 contexts. But we receive the following error message at irregular interval;Lost Failover communications with mate on interface QUIDEVFailover interfaces are GE0/0 and GE0/1Cables ar...
HelloI want to do a Destination NAT using the ASA. # Diagram How can I NAT when accessing Telnet from client to router? Original Packet Source IP Address : 172.16.100.128 Source Port : any Destination IP Address 172.16.100.135 Destination Port : TCP...
