When is it totally safe to turn off H323 and H225 inspection on Cisco ASA firewalls? We have VoIP traffic between our data centers (all internal and no NAT) but they are separated by a firewall (due to security/audit requirements) and looks like the ...
Forum Posts
Hi guys, I have FMC (Currently running software version: 6.2.3.2) with two firewalls added on it. I have deployed policy on each device (also running v6.2.3) and I opted out for Balanced Connectivity and Security which results in: This policy has ...
Hi all. Im pretty new to Cisco ASA so meaby this is a stupid question :) I have a ASA 5525 that runs a old ASDM so when i want to run ASDM i get "unable to launch manager from 10.10.10.1" But when i downgrade my Java version i can connect without p...
Another ASA Backup Question...I would like to use EEM to have a 7-Day backup, using the backup command in the ASA. I have the following information from balaji.bandi and this post (works great!):1. Requirement is 7 configuration files2. Test-run ever...
I know it can generate a ton of logs but is it best to enable or disable this syslog?
Hello All, Is there a way to use FMC 4500 to backup ASA 5545x's on our network? I thought there was a way to do it through the web guy on the FMC. Can I enable SCP server on the FMC and use EEM on the ASA's to transfer the Backup? We will have a ROBO...
hello team, i want to use the FMC with Firepower. Now i tested the system with only 1 firepower module (hardware) and i always have a CPU usage with an average of 80%. It's so high, that my system is to slow to handle it. The Software of the FMC and...
Hello Great People, I am getting this error in Cisco FMC 4500(Current Version- 6.4.0.1) when i pushed the policy to the devices(ASA's and 8350's). all devices has this health alert. all devices are on the same version 6.4.0.1. "https://www.cisco.com/...
Hello, I would like to ask if the FTD needs to access the internet DNS. I have high availability FTD 2110 managed by FMC and I see in the events that there are several queries to DNS that are blocked. DNS isn't managed by FMC? Do the FTDs have any r...
GreetingsI have an vFTD running 6.4.0.4 managed by an FMC running the same version. Now I need to migrate this FTD to another FMC. Exporting and importing the policies are quite straight forward but what about the VPNs. We have quite a few and I woul...
Did anyone else notice Microsoft.com was unreachable for most of the day Monday if you're using Cisco's Firepower with the Security Intelligence Feed? I am posting this so people are not wasting their time trying to find the root cause. We did not se...
I am enable to find option in FMC 6.3.0.3 to enable inter-chassis fpr9300 cluster interface monitor?
Resolved! ASA 5510 and AIP SSM-20
Hi everyone, Just bought an ASA 5510 with a Security Plus license.Can someone clarify me if I buy the module AIP SSM-20 with IPS this function will work? Or I need another license to IPS work?Thanks in advance!
Resolved! Cisco ASA 5506 DMZ setup
Hello, Am trying to setup a DMZ for a ASA 5506. At the moment we have 3 interfaces active on the ASA which are:gi1/1 outsidegi1/2 insidegi1/3 VoiceVoice has an internal ip with a pat on the outside interface with a public ip address from our range.No...
Hi,I have inside dns server that contains records with private ip addresses. My ASA firewall is responsible for rewriting dns requests from outside hosts. Now i need to make zone transfer between insde DNS server and DNS server that is placed on outs...
