HiWe have a situation with an ASA where there is a PAT set up for connections from the inside interface to the outside (mpls, not the Internet). There are certain connections initiated from a remote site that come in on the outside interface to a re...
Forum Posts
Hi all,I can't seem to find a good intrusion rule to detect DNSCAT2 tunneling traffic. I've set up a working DNSCAT2 tunnel, and copied all DNS traffic with a SPAN port to a passive interface on our FTD.Then created a dedicated rule with application ...
Hi,Please, i have an issue with a small project am handling in my office...I want to set up a NOC for our customers about four of them on aseparate network from existing office network.I have a 5506-x asa firewall with plus license and a 3560 switch...
Hi, I have a dude, we are planing to upgrade from 1G interface to 10G interface. actually, we have two portchannel with four interface each one, they are to 1G.I want replace the interfaces from the port-channel, with 10G interface but this portch...
So I have an ASA5506 and am trying to use the saved config file to teach myself command line usage. I have two entries for PAT. One is for port 443 to xxxxx and the other 554 to yyyyy, both are for the same internal 192.168.0.x IP address. The save...
Can someone who knows Cisco SMARTnet well, if I take out a Smartnet contract for my ASA5506 will this enable me to call Cisco and ask them the following sort of questions please? 1) What are the command lines I need to enter to map external IP addres...
Hello We want to configure RAVPN in a Firepower device and use Cisco ISE to authenticate VPN users, Firepower device is managed by FMC.I need to know if there is a test we can try to validate communication from managed device to Cisco ISE vía CLI. Re...
Hi Guys, iam pretty new to the network segment and try to configure a asa 5506-X My requirement look like this picture I need to connect via rdp(3389) from the "Client Subnet(172.20.X.X/22)" into the "New Subnet(192.168.3.0/24)." So basically a singl...
We have activated smart account with cisco & received token from Cisco but when trying to register in our firewall getting error (The device is unable to connect smart license server). In our case firepower 2110 firewall evaluation period got expired...
Dear All, If I define Multi-context A and B inside a Firewall, Can I do route leak between Context A and B? If yes then how? Thanks.
Resolved! sfr module interfaces not showing
Hi,The asa sfr module doesn't show any of the ASA interfaces when I open the interfaces tab on the FMC, the weird thing is that the interfaces are showing on the sfr module CLI when I execute show interfaces. Both control and protection licesnese are...
hello everyone, what would you recommend in terms of securing branch offices that directly connect to the internet instead of backhauling via the head office? We have over 90 offices all connected over Dmvpn. Each office goes out to the internet dir...
Hi, I'm trying to find the serial number of Cisco devices using SNMP. I tried OIDs 1.3.6.1.2.1.47.1.1.1.1.11.1, 1.3.6.1.4.1.9.5.1.2.19, 1.3.6.1.4.1.711.2.1.1.2, 1.3.6.1.4.1.9.3.6. But, none of those gives me a correct serial number. Is there any othe...
Dear All, Does anybody know if admin context, configured in routed mode but with transparent user contexts, with access to a dedicated physical management port can send syslog messages for other contexts as well?The problem is I can't use inband sysl...
Hi I want to do split tunnel in anyconnect vpn. All traffic should go via tunnel except zoom meeting and it should go via local internet
