hi,i'll be configuring AAA on our FWs and need to confirm if this single command line for AAA accounting is enough to log the executed commands to ISE: aaa accounting command <ISE-GROUP-NAME> or just these two? aaa accounting command privilege 1 <ISE...
Forum Posts
Resolved! End of Service for ASA5515-SSD120-K9
Hello there. We currently have a ASA5515-SSD120-K9 we purchased for use with CX bundle. Cisco marked this model of firewall for end of service in August 2020 and encourage to migrate to Firepower. We migrated this CX to firepower some time ago using...
Hi,Can I know if it possible to do manual IPS signature update on the newer NGIPS (eg. Firepower 4100 series)
I am trying to set this up for SolarWinds, this works a few of my other ASAs. I need some help. ASA Version 9.8 CMI as follows: ASA(config)# snmp-server group ALL-ACCESS v3 privASA(config)# snmp-server user SNMPnetwork ALL-ACCESS v3 auth sha SNMPword...
Resolved! config-register not accessible
Hi when i try to make a password recovery i use the command confreg but i omit to put 0x2102 and now im able to boot login to the ASA but the startup-config is not loading the config. here is the MSG: Ignoring startup configuration as instructed by ...
I have a location that we acquired that has a second location connected to them via a site-to-site tunnel. We just took over management of the hardware at the second location and need to get syslog messages sent to our existing syslog server. The exi...
I have a HA pair of Virtual FTDs on a couple of ESXi 6.5 hosts in the lab. They were built with the 6.4 image and are using the local FDM management. They have been patched a few times with the 6.4 patches and are currently running 6.4.0.5-23.I hav...
Hello, I have two ExpressRoute connections to Azure. They are on the ASAs. (Please see network diagram). Firewalls are running as standalone - no failiover pair. Core switch is running OSPF with firewalls. Firewalls are peering with AZURE using BGP. ...
Hi All, I have a request to open http port from the below addresses , we have route already in place and phones work as they should...but they cannot access the phones gui from their end... So am i right thinking its juts a matter of cr...
Hi people.Please can you help me?I erased disk0 and whenever i upload the ios after a reboot it doesn't boot while when the ios is uploaded works ok.Did i miss a command that i have to type to save it?show flash doesn't show the ios installed.
I have Cisco ASA 5516 and i want to connect fortigate via IPsec . IPSec its done but i cant ping from my local to remote, and remote to local. Maybe someone to help me solve this issue.In this issue from my local server can ping gateway on fortigateb...
Hi, Is is possible to run multi-context mode in ASA5516X? If yes, how do we redirect the traffic to SFR module, is it a per context basis? Thanks
I have an ASA-5516-X that I'm migrating an old 5510 to. As an example I have the below, which is trying to take inbound port 54321 and routing that to 'thing:80' inside. object network thing host 192.168.1.27 nat (inside,outside) static interface se...
Hello Experts, I have seen in ASA firewall for enabling VPN site to site they use below 2 commands. 1. Crypto isakmp enable outside2. Crypto ikev1 enable outside. As for my understanding the 1st command is used before 8.4 versions of ASA. Please corr...
We recently put in a secondary internet connection across the state. I have the primary connection coming into our main office. Both connections come in to ASA's that are set up in a failover pair. Topology Between Connections Primary ISP > 4500x ...
