Hello experts,I'm interested to know if on the Cisco ASA there is a way to view the IKE encryption keys. More specifically, I want to do a packet capture in GNS3 (consider this a whitehat experiment) and decrypt IKE_Auth packets which are encrypted w...
Hi I am unable to deploy to Cisco vFTD 6.3.2 or v6.3.0 from Cisco FMC v6.4.0 and I get this error message ... Cisco FMC errorWhen I login to the FTD , The domains.conf file is absent .. I have passed this onto Cisco TAC but no progress ..
Hello everybody, I have a Firepower 2110 (Rel. 6.4.0.4) that has several DMZ-interfaces. There is a special box (IP: 172.17.80.40/24) where just a default gateway(172.17.80.254) can be configured, that is a DMZ-interface1. This box needs totransfer t...
Hi All, What is the difference between virtual mac that we define in HA using two different methods?1 ) Using "failover mac address .. " command2) And under interface using mac-address command. Thanks in advance.
Hi everyone, I have a ASA 5506-X with a Base License with this features: Licensed features for this platform:Maximum Physical Interfaces : Unlimited perpetualMaximum VLANs : 5 perpetualInside Hosts : Unlimited perpetualFailover : Disabled perpetualEn...
Hi I need to translate old NAT statements to New statements and wanna verify if my statements are correct and what needs to be done to verify if all good :Old:global (outside) 1 interfacenat (outside) 0 access-list MGT-NAT-EXEMPTnat (inside) 0 access...
FirePower 2110 v 6.2.3.4Snort Update ran at 2:00At 2:15 System initiated a DeploymentDeployment has been running for 6Hrs and no new deployments can be run
I have cisco ASA 5510. I want to know if I can configure two or multiple ip address on the same interface at a time or not.The scenario is like this:I have 5 public IP addresses : 45.X.X.0/29 There are 4 physical interface: e0/0, e0/1, e0/2 and e0/3....
Dear All, I've the ASA device with the following config and the problem to config the inside traffic to outside traffic communication. Kindly share the solution for this. Note: The device with bgp config. ping from firewall to 10.101.174.178...
I saw that CDO will be a future release for some of the 4100 NGFWs. is CDO supported on the Cisco 4115?
HiWe have a situation with an ASA where there is a PAT set up for connections from the inside interface to the outside (mpls, not the Internet). There are certain connections initiated from a remote site that come in on the outside interface to a re...
Hi all,I can't seem to find a good intrusion rule to detect DNSCAT2 tunneling traffic. I've set up a working DNSCAT2 tunnel, and copied all DNS traffic with a SPAN port to a passive interface on our FTD.Then created a dedicated rule with application ...
Hi,Please, i have an issue with a small project am handling in my office...I want to set up a NOC for our customers about four of them on aseparate network from existing office network.I have a 5506-x asa firewall with plus license and a 3560 switch...
Hi, I have a dude, we are planing to upgrade from 1G interface to 10G interface. actually, we have two portchannel with four interface each one, they are to 1G.I want replace the interfaces from the port-channel, with 10G interface but this portch...
So I have an ASA5506 and am trying to use the saved config file to teach myself command line usage. I have two entries for PAT. One is for port 443 to xxxxx and the other 554 to yyyyy, both are for the same internal 192.168.0.x IP address. The save...
