I have an ASA-SSM-20 module seems to be faulty on an ASA. I've been looking around the net and it looks like these modules usually come in 2 flavours - AIP-SSM-20 and CSC-SSM-20. The output from the ASA doesn't specifiy whether it is either of these....
Forum Posts
Dear Team: is there any Cisco documentation for Upgrade Procedures on ASA 5525-x from 6.2.2 to the last release 6.3? I've seen int the web page a file name but with a different extension ".tar" https://software.cisco.com/download/home/286271172/type/...
All, I received a SSM-20 (Cisco Content Security and Control) for use with the ASA 5540. However I saw that the module does not have a software installed. Its status stays all the time as Unresponsive. ciscoasa# show module 1 detGetting details from ...
Resolved! Best Practice for VPN traffic Policys
Hi,New the world of FirePower and FMC. Have a Firepower 2100 appliance between my main router and Core Network switch. Have an IPSec Site to Site VPN back to HQ that terminates on my main router. In my FirePower Access Policy I have rules that ca...
Resolved! Firewall HTTPS Traffic Flow
Trying, through ongoing research and troubleshooting, to configure an ASA5525 running version 9.8(2) to allow bidirectional traffic from two ESXi 6.7 VMs from an UCS C240 M5 through the ASA to a remote server that “telnet <DNS Name> 443” from my lapt...
Resolved! 2 distribution switches to 1 ASA
Hello, I've built a reasonable large topology in GNS3 to show use of a variety of layer 2 and 3 technologies, with just a touch of ASA or enough to demonstrate ASA basics and setup of a site-to-site VPN. As a result and most importantly because I can...
I have configured IDFW (There is LDAP connection with the AD parent domain ), ASA and the users are all over the AD forest. We can query the users inside the parent domain but not at the child domains. Is there a possibility to configure LDAP with p...
While configuring an interface for a FPR2110 using FMC 6.4.0.4 I created a new security zone. While creating this zone, I mislabeled (typo) the zone. I was able to create a new zone with the correct label, but I cannot determine how to delete the i...
I have been looking at the logs on my firewall and have noticed that the source IP is not always an address on my LAN. How is it that source IP's are not on my LAN?
Hello all,I have to create a topology for VPN connection of the branches with the HQ, to access the servers. My question is: Which FW series (ASA, FRP...) to employ at the HQ and which one to the branches. Branches are small offices up to 10 employee...
emote site router ==> ipsec tunnel==> 5555x FTD / FMC (ASA headend) I see ALL event details of traffic (local and web traffic) that is crossing the ipsec tunnel in the CLI of the ASA FTD but I only see local traffic in the FMC. I do not see any 80 or...
Hi Everyone, In our environment we are frequently asked to check specifc IP addresses to confirm if sourcefire is allowing the connection or not.Need to confirm if Sourcefire DC is blocking any IP address which is the best place to check?Under conne...
Resolved! Cisco FXOS Upgradation
Hello, I want to upgrade Firepower devices with FTD logical devices. Can FXOS be upgraded directly through Chasis Manager or entire set of FMC, FTD and FXOS need to be upgraded together. Thanks
Resolved! FTD subinterface not getting any signal
Hi,One of my FTD 2110 (6.4.4) interfaces is interface DMZ in VLAN 333. I created subinterface 1/4.333 and configure IP (MTU 1500) , vlanid 333 subinterfaceid 333 and enabled it) I also enabled physical interface 1/4 with no IP (gave it a name and mtu...
