Hello, I have configured Firepower Management Center with the 2019-06-30 snort version file. I am trying to generate an alert when I type "nslookup 8800.org" on my laptop. Right now, it is not generating alert for the same. I tried to look for the "B...
Forum Posts
Hi Everyone, Can anyone help with sizing the Cisco ASA 5500X? Total number of user will be 150. Total ISP bandwidth will be 50Mbps.Services used will be - URL Filtering, Application Control, AMP, IPSEC, IPS/IDS. If anyone has sizing document, do shar...
PCI scan came back that aggressive mode needs to be disabled on ASA. I am looking through forums and researching, I am seeing conflicting information on this. The command to disable aggressive mode is crypto ikev1 am-disable. But this is where it is ...
Question regarding throughput with AVS and IPS inspection in a multi instance setup. As far as I can tell, enabling multi instance basically cuts your throughput in half when deploying rules with IPS policy inspection enabled. Running iPerf tests th...
I have both SNMP v1 and v2c enabled on my asa Output given below:asa1/admin# sh snmp-server groupgroupname : xxxxx security model:v1readview : def_read_view writeview : <no writeview specified> notifyview: def_notify_viewrow status: activegroupname :...
HelloASA5508 with Cisco Adaptive Security Appliance Software Version 9.8(2) Currently all HTTPS traffic is assigned the firewall outside interface IP address. I have about 13 external IP addresses. How do I assign all outbound https traffic its own I...
I have an old 5505 and recently upgraded my internet from 75 to 100mbps but am only getting about 65mbps up and down. I spoke to the ISP, Verizon, who had me test the speed with my laptop connected directly to the Verizon equipment and I was getting ...
Clear XLATE break all current connections using NAT on the ASA?
Resolved! AnyConnect on FPR1120 and FPR1010
Do the FPR1120 and FRP1010 support AnyConnect? We're looking to upgrade from ASA5505 with AnyConnect and want to be sure no major features are missing. If you can link to the official documentation that answers this, that'd be much appreciated.
Purchased an ASA5516 with FTD. The ASA was re-imaged with ASA w/Firepower. The license that was purchased with the ASA is a Smart FTD license. We can't seem to get the smart license applied to the ASA now that it has been re-imaged. I would think...
Resolved! Cisco ASA External Logging
Hi I want to create new LOG server for my existing ASA Firewall. I want to know what are the possible syslog server I can use. is there is any cisco freeware tool for external log server. I don't trus 3rd party software like kiwi syslog. Kindly sugge...
Hello.I cannot find option from Web to change default port Management HTTPS or Anyconnect.I manage FTD localy, not from FMC.If I enable HTTPS access on outside interface - SSLVPN stop working. Have you met with a similar problem?Is any option to chan...
Good evening everyone.The bug I referenced above is a high severity and I happen to have an old end of life ASA 5520 that shows on the "Products confirmed not vulnerable" list. My general concern is that I ran the "show asp table socket | i SSL|DTLS...
Hi, I have a strange problem here. We have a site to site vpn from a branch office to our head office. In the branch office we use a Cisco ASA 5510 9.1 (3) and in the head office we use a Cisco ASA 5516 9.6 (1). We have some networks here which go tr...
I wanna configure a static NAT rule , from outside network (internet) to access inside switch (intranet)using telnet protocol . pls see below my setting ,but NAT didn't work , kindly advise right setting .inside switch IP : 192.168.101.211firepow...
