For RA-VPN users I would like to authenticate them through a RADIUS-server->Active Directory chain.This works fine as long as I use a VPN-pool for IP addresses. However, due to the fine grained FW rules, each user needs to be assigned a specific IP a...
Forum Posts
Hi guys,We have an issue with one of the node in our ASA cluster - basically module is in Unresponsive state.From what I can see there is probably issue with memory - I am suspecting one of the memory module but would like to know if someone have exp...
Hello, I have ASA with SFR module managed by FMC. I have a problem with windows update. I have a new pc and I try to update it, but it fails, when the traffic passes through the SFR.When I disable the SFR the updates are successful. It hits the righ...
Resolved! ASA SSH inspection
Hello, I am trying to understand how inspection works on the ASA and although Cisco documentation on the subject is very analytical, after some testing on a 5520, a few questions have come up. The Lab setup is the following:PC -> (inside)ASA(outside)...
Hello, We upgraded our 5505 to a 5506 with FirePower to take advantage of the increased bandwidth and the FirePower Services for security. Previously we had extensive object groups for access and denial and we wanted to transition to the FirePow...
Resolved! virtual FTDs
Hello all, i have recently installed two virtual FTDs as Active and Standby but now i receive this error.Interface 'GigabitEthernet0/3' is not receiving any packets Is there anyway i can solve this issue and what is causing this issue please.Thank yo...
Has anyone noticed the high degree of "Background Intelligent Transfer Service (BITS)" traffic is coming through their FWs? I've read up on what it is and wondered why so much traffic is hitting the FW and what is being transferred. I came in this ...
Hi Sir: What event will trigger any session to log the Reason type of "Intrusion Monitor". The Firepower just think the session is not really hight critical and it will not compromise our client. So it will log of Intrusion Monitor , Right ? Or it...
Hi Pros The biggest problem now is with the ASA firewall we have no idea on how to configure them to achieve a connected network. Our ping test from Router and Users fail to reach the DMZ interface. I assume that we have to configure static routes an...
I am trying to setup for the first time a CISCO ASDM 5510 that I recently bought from 2nd hand. My plan is simple:e/0 (outside) no income traffic allowed at alle/1 (office) my home-officee/2 (servers) it is my home lab I have some servers there and I...
Is it posible to stablish a site to site vpn between 2 remote located FTD's without a FMC?
Hello, I am unable to find the included and the max. numbers of users and VPN peers for the new FPR1010-ASA-K9. (ASA Image) Thanks a lot in advanced. EL.
Hi all Does anyone know how to globally set SSH access list? I have Cisco FMC/FTD 6.2.3.x There's no setting for it from the platform settings sectionI tried to use flexconfig bu "configure ssh-access-list" is a blocked command... Any ideas greatly a...
Trying to find out when the HW EOL date is for the 2110 ASA is.
