I applied a new policy to an FTD, but now I need to know which policy was previously applied. I searched system> monitoring> audit but could not find the information. Does anyone know where I can find this information?
Yesterday I tried to set a DMZ on Cisco ASA 5525 And i have a server in DMZ already with 192.168.10.20 I have also a public IP of 154.72.196.42 from my ISP So when i hit the ISP IP via internet to access my web server in DMZ it gives me an erro...
Hi, We have FMC 6.2.3 that is constantly showing high memory utilization. It is installed on VMware with the minimum requirements.It is controlling two ASAs with not much traffic passing through them. Output from top Mem: 7508840k total, 6830632k us...
I have setup a VPN site to site between 2 firewall. On my site Y, public IP 210.666.111.7 with 1 local LAN (10.145.49.0/24) <--config is belowOn my site Z, public IP 216.55.11.82 with 2 local LAN (10.83.132.0/24 and 10.83.138.0/24) I am trying to rou...
I have a 5512 with Firepower installed. I had some messages occurring periodically that looked like this. %ASA-1-323006: Module sfr experienced a data channel communication failure, data channel is DOWN. %ASA-1-505015: Module sfr, application up "AS...
Hi All, I have latest Java installed in my windows 10 machine. I am trying to launch ASDM but it never work. ASA Version 9.8(1) , ASDM 7.8(1) [ERROR] CLI-PASSTHROUGH-DEBUG Inside doInitialProcessing:0 [SGZ Loader: launchSgzApplet] ERROR com.cisco.p...
Hi everyone,I have two ASA firewalls 5525 with firepower modules. first box has the firepower module installed and it's added to the FMC. second box (a second ASA 5525 with firepower module) we just received to make both boxes in failover mode. seco...
HiDont think this is possible but will check, currently running Cisco Firepower 6.4.0 I know you can publish a website via NAT, but doing it this way needs a unique external IP for each site. What if for example you only have one public IP but need ...
Dear all, i have a situation as mentioned below.I have two ASA 5525 in Active-Standby modeI have installed firesight Successfully.Situation is when i would like to go "Session sfr" for cli mode. it gives me a syslog massage which is "sfr is not respo...
I'm looking at deploying a pair of ASA 5515-X firewalls and would like to use contexts to create virtual firewalls for different purposes. I'd also like to add some resilience by configuring the pair either in active/standby or active/active (not sur...
Hello everyone,I'm aware CISCO ASA allows you to see bandwidth usage for outside interface for approx. 2 hours?Is there any step by step procedure I can use to store those logs permanently somewhere else? How can I check on ASDM the current BW usage ...
I´m struggeling with the following situation. We have a Site to Site tunnel between ASA and a Checkpoint.Our site has a internal 10.0.0.0/24 net and the remote site has 4 different nets configured.Everything works as expected. Now we must allow our A...
Hi all,We currently have no firewalls (yet) between workstations and internal DNS servers, and we see sometimes see some sinkholed traffic hitting our Internet firewal (ASA + firepower 6.2.3).To avoid having to search through the DNS logs each time, ...
I'm configuring a pair of ASA into HA mode for failover. Active/Standby. But in this case, each ASA has a separate internet connection. ASA 1, with ISP A | ASA 2 with ISP 2. I know how to configure the ASAs into HA mode, but a bit uncertain about on ...
