I am just trying to understand the difference between the below two NAT statements. As far as I can tell both seem identical?Number 1. allows any outside ip to hit the public ip of FTD 104.4.4.4 on port 80 which gets translated to destination of we...
Hi, after every rule deployment CSM 4.19 resets hitcounts to zero of all ASA access-lists from an interface.Does anybody know how I could prevent this behavior? RegardsRoman
Dear community,I have implemented two nat types and am able to achieve the same result. The nat types are static and port forward nat as below: natsnat (inside,outside) source static R1 ASA102nat (inside,outside) source static static R1 ASA102 servi...
HI Guys, I want to discuss about 1 scenario one of our client have 2 5516-x Firepower boxes and they are running on Single mode and the failover for both shows Active/Active. My question is does this box required Security Plus license? because our cl...
Hi, Can you add Access Rules to A VTI interface in ASA 9.8? I see the tunnel interface showing as up in the ASDM, and I can ping the end points from the CLI, but when I chose "Add access rule" in the ASDM the list of interfaces does not includ...
Hi All, I need to install a Cisco FTD 2100 series appliance to sit inline between our Cisco ASA firewall and LAN switch. The Cisco ASA is connected to the LAN switch using 2 x 1GbE interfaces that are bundled in a port channel. To ensure that the...
Hello all. I'm trying to configure an IPS inline pair between an ASA and Nexus switch. The ASA is currently port-channeled down to the Nexus and I want to implement the Firepower 2130 inline in between them. Is it possible to configure and 2 ether-...
I am having the issue with following below configuration and getting error. Please help me solve the issue. object-group network LERAPID7_Consolenetwork-object host 192.168.2.80object-group network LMRAPID7_Consolenetwork-object host 192.168.2.81obje...
I'm trying to open web traffic to: upgrade.bitdefender.com on an FMC. I made a change to the access control rules as indicated in the attached pic, but it's had no effect. Is the correct policy to modify? Thanks!
Dears, i need help related to cisco bug: CSCux82436. Cisco Firepower management Center pulls user activity from the DC's event viewer and binds an Active Directory user to an ip-adress. However, in this case when no event-ID is generated, the FMC st...
Hi, Guys I have the FMC Virtual Appliance in version 6.2.3 and the FTD in version 6.2.2 an ASA 5506-X with FTD image installed. Whenever I try to do deply in FMC I get this error message: When I click on details, I have identified that there is a ro...
Hi, Guys I have the FMC Virtual Appliance in version 6.2.3 and the FTD in version 6.2.2 an ASA 5506-X with FTD image installed. Whenever I try to do deply in FMC I get this error message: When I click on details, I have identified that there is a ro...
What is the reason behind increasing MTU on CCL ( cluster control link)?Is it because in the worst-case scenario where one of the boxes fails, CCL will be responsible for carrying heavy traffic ?
HelloI want to register our smart license satellite server is cisco. I set proxy on smart license satellite server due to connect to cisco. When I want to approve an account , the below error display on screen: "Registeration failed due to communica...
Hello, I wanted to know if Cisco ASA support a port forwarding to host who is not directly connected, and the ASA learns this host via static route. Regards, Rodrigo Haim
