I have 2XASA5585-X firewalls in active/active failover mode, with 30 contexts. But we receive the following error message at irregular interval;Lost Failover communications with mate on interface QUIDEVFailover interfaces are GE0/0 and GE0/1Cables ar...
Forum Posts
HelloI want to do a Destination NAT using the ASA. # Diagram How can I NAT when accessing Telnet from client to router? Original Packet Source IP Address : 172.16.100.128 Source Port : any Destination IP Address 172.16.100.135 Destination Port : TCP...
Resolved! Adding a new AAA SERVER GROUP
I will give some context so there is already have aaa server group running radius and local database as backup.So My company which is going to manage their security devices is asking as to add another server groups running TACAS+, My doubt is if aft...
Resolved! Encapsulation Failed error with ZBFW
Can you guys help me figure this out?Inter-zone communication is interrupted with "encapsulation failed". This is a minimal proof of concept simulation in Packet Tracer to start getting into ZBF. One router with two interfaces, each on one zone: LAN ...
My goal is to make the WAN interface of my router "stealth" to unsolicited TCP incoming packets. That is so that it simply drops packets without a match in the NAT table instead of replying ICMP host unreachable. The router is behind my ISP modem and...
Is there any temporary license or method could be used to activate ASA 3DES function on Cisco FPR2130-ASA-K9 and FPR4110-ASA-K9.Our Tier 2 partner forgot to order licenses and now the devices delivered but end user urgent to activate these devices.
HI.. I have been running ASA firepower and have setup access policy on FMC, currently policy is setup for IPS as any any. Now i want to setup another IPS policy for outbond to inbound on FMC, could you please help to configure policy for outbound to ...
I have a task as part of an assessment which is completely stumping me. I am required to use ASA FTP inspection to block access to a particular directory for all but one user. I believe I know how to use a policy map to identify the user (match not...
Trying to configure the FW to allow ssh from a remote vpn user to an inside private host over Mgt interface and allow traffic out Outside interfaceVPN is working correctly, ssh is not working to internal host in private subnet(traffic from the VPN su...
Resolved! ASA password encryption
Hi, does anyone know which key size is used on the ASA when 'password encryption aes' and the master passphrase are enabled?
I am spinning up a new config and am running into issues. My physical config is Catalyst_9300 --> ASA_5516X --> ISR1108p. I am attempting to run the ASA in transparent mode, inspecting and passing the VLAN traffic between the switch and router. Wi...
After a disconnection occurred in a videoconference, troubleshooting began to identify the root cause. After log analysis, we verified that the call was disconnected by H.323 timeout.However, I would like to know if you have any ASA configuration to ...
Hello. I'm attempting to configure the ASA in the GNS3 topology show below. I was able to set up the ASA as a DHCP server to configure the computer, so the inside network appears to be configured correctly. However, I'm not able to ping google.com ...
Resolved! Policy Deployment Alert for Cisco FMC
Hello, I want to configure alerts for FMC in such a way that every time a policy is deployed the intended recipients should receive an email. Is it possible to configure this functionality in FMC ? I am aware about the IPS/correlation/Health notifica...
i noticed that there are updates on the ASA, the updates available are cisco network sensor patch and its uninstaller, what are these and their benefits?Thanks!
