What purpose doe the AD join serve when creating a realm with the FMC? It seems to be the only difference between AD and LDAP is the AD boxes. Since AD is LDAP, why is there even two choices here? Why would I use one over the other?
Forum Posts
Resolved! IPSec lifetime configuration - FDM
Hello everybody,I'm trying to find out where to specify IKE Phase 2 Lifetime duration (IPSec lifetime)? Under objects, you can only define lifetime for IKE Policies - Phase 1.Software version is 6.3 and configuration is being done via FDM. Appliance ...
I have 2XASA5585-X firewalls in active/active failover mode, with 30 contexts. But we receive the following error message at irregular interval;Lost Failover communications with mate on interface QUIDEVFailover interfaces are GE0/0 and GE0/1Cables ar...
HelloI want to do a Destination NAT using the ASA. # Diagram How can I NAT when accessing Telnet from client to router? Original Packet Source IP Address : 172.16.100.128 Source Port : any Destination IP Address 172.16.100.135 Destination Port : TCP...
Resolved! Adding a new AAA SERVER GROUP
I will give some context so there is already have aaa server group running radius and local database as backup.So My company which is going to manage their security devices is asking as to add another server groups running TACAS+, My doubt is if aft...
Resolved! Encapsulation Failed error with ZBFW
Can you guys help me figure this out?Inter-zone communication is interrupted with "encapsulation failed". This is a minimal proof of concept simulation in Packet Tracer to start getting into ZBF. One router with two interfaces, each on one zone: LAN ...
My goal is to make the WAN interface of my router "stealth" to unsolicited TCP incoming packets. That is so that it simply drops packets without a match in the NAT table instead of replying ICMP host unreachable. The router is behind my ISP modem and...
Is there any temporary license or method could be used to activate ASA 3DES function on Cisco FPR2130-ASA-K9 and FPR4110-ASA-K9.Our Tier 2 partner forgot to order licenses and now the devices delivered but end user urgent to activate these devices.
HI.. I have been running ASA firepower and have setup access policy on FMC, currently policy is setup for IPS as any any. Now i want to setup another IPS policy for outbond to inbound on FMC, could you please help to configure policy for outbound to ...
I have a task as part of an assessment which is completely stumping me. I am required to use ASA FTP inspection to block access to a particular directory for all but one user. I believe I know how to use a policy map to identify the user (match not...
Trying to configure the FW to allow ssh from a remote vpn user to an inside private host over Mgt interface and allow traffic out Outside interfaceVPN is working correctly, ssh is not working to internal host in private subnet(traffic from the VPN su...
Resolved! ASA password encryption
Hi, does anyone know which key size is used on the ASA when 'password encryption aes' and the master passphrase are enabled?
I am spinning up a new config and am running into issues. My physical config is Catalyst_9300 --> ASA_5516X --> ISR1108p. I am attempting to run the ASA in transparent mode, inspecting and passing the VLAN traffic between the switch and router. Wi...
After a disconnection occurred in a videoconference, troubleshooting began to identify the root cause. After log analysis, we verified that the call was disconnected by H.323 timeout.However, I would like to know if you have any ASA configuration to ...
Hello. I'm attempting to configure the ASA in the GNS3 topology show below. I was able to set up the ASA as a DHCP server to configure the computer, so the inside network appears to be configured correctly. However, I'm not able to ping google.com ...
