We recently put in a secondary internet connection across the state. I have the primary connection coming into our main office. Both connections come in to ASA's that are set up in a failover pair. Topology Between Connections Primary ISP > 4500x ...
Forum Posts
Hello Everyone,It may very well be the time of day I'm writing this and long hours of looking at the screen.. but I'm setting up a lab ASA with an inside and outside interface. Inside interface is connected to a L3 Nexus 3064 using a transit VLAN ( 1...
I am looking for advice on which tools people are using to analyse syslog data from their Firepower modules to get detailed information on user Internet access. I am able to send the data to our syslog server, and have set up the free version of Splu...
Resolved! ASA NAT rules
Hello,I have a question about NAT rules on the ASA: they have no action statement and could anyone please tell me do they actually do anything?I am attaching screenshot.
Can someone help me to understand how a firewall makes a routing decision? I have some traffic which needs to get to a subnet not directly attached to the firewall. there is a static route to that subnet, however the nameif subinterface is not the s...
Hello Experts, Is the below NAT statement is correct. There is 2 different object provided in the destination nat (Outside,Extranet) source static CS_App_2 CS_App_2 destination static obj-10.155.185.220 obj-125.16.239.77 Also please provide me the re...
Resolved! ASA VPN tunnel
Hello Experts, Whether we can use the same policy and transform-set for multiple tunnels? eg: I have created one policy and one transform-set in router(IKEv1).I planned to add multiple crypto-map for different customer and separate interesting ACL in...
We are running ver 6.2.3.14(build 41) of Cisco Firepower. Is there a way to get an exported copy of users from System>Users either as a .csv or any format for that matter? I have looked around and I can't seem to find a way to do so. Any answer or al...
Hello All, Has anyone tried this or has a good idea on the effect? I have not been able to find any discussion or documentation about this specific adjustment. As a short-term mitigation to an overtaxed ASA, I'm considering reducing the setting for ...
Hi, First of all, I would like to thank you for taking the time to help me with my issue. i am working on a Cisco ASA5516 and i am having trouble to access the internet from my DMZ and DC's. On the DMZ, i have one Server working as WSUS and AntiVirus...
Resolved! Encryption
Hello experts, I have seen the encryption strings as des, 3des, aes while creating the site to site vpn tunnel. What is the difference bt these 3 methods and which is preferable to use for encryption? Is there any encryption string apart from the men...
Hi All,We've had an on going problem with the user agent for firepower since day 1, at the moment it just keeps saying "error processing event record - No domain information" (see screen shot). The Active directory server has checked in and shows gre...
On a Firepower 1010 running FTD, how do you change the https management tcp port? Trying to find equivalent of the asa command "http server enable <port>"
When is it totally safe to turn off H323 and H225 inspection on Cisco ASA firewalls? We have VoIP traffic between our data centers (all internal and no NAT) but they are separated by a firewall (due to security/audit requirements) and looks like the ...
Hi guys, I have FMC (Currently running software version: 6.2.3.2) with two firewalls added on it. I have deployed policy on each device (also running v6.2.3) and I opted out for Balanced Connectivity and Security which results in: This policy has 9...
