I am trying to establish a base policy on a FirePOWER deployment. I want to introduce ANTI-Spoofing of RFC1918 addresses and all other reserved IP addresses to block anything at the Firewall with such addresses in the source. I understand that revers...
Forum Posts
Hi,I recently upgraded Cisco ASA 5505 firewall to its latest version 9.2.4 from 8.2 but after upgrade Cisco ASDM is unable to read asa image. Can you please let me know the issue and how it can be resolved. Thanks & kind regards, Muhammad Hamid Ashra...
My manager went to a conference. She came back asking about replacing the routers in our WAN with firewalls. My knee-jerk response was no way, but we are migrating to an ethernet based WAN - so maybe? Any thoughts?
Hi Guys,Do you know if Cisco Firewall behavior is based on RFC?In addition, what is the difference between old 8.2 to 9.x in terms of the packet flow from ingress to egress?Thanks
Hi,What is the difference between "Firepower Threat Defense-Firepower NGIPS-Firepower Services on ASA" ? ASA Mid-Range (5512/15/25/45/55) does not support firepower NGIPS ?. Does it mean it does not sNG features ? Thanks
Resolved! Inter vlan port forwarding
Hi,I currently have a vlan setup as below on a ASA5516, other ports are unconnected, this is connected to a Cat3650 switch with the vlans setup.interface GigabitEthernet1/2no nameifno security-levelno ip address!interface GigabitEthernet1/2.10vlan 10...
Hi- I added a new access list statement, but it went after deny. The only way I had to move was using ASDM software. How can add an acl line before deny in acl? e-gremark test access-list inside_in line 7 extended permit tcp host 1.1.1.1 host 2.2.2.2...
FTD and OSPF MD5 authenticationHi all,I am trying to get OSPF authentication working between router 4451 interface and FTD 550x-X with FTD image, managed by FMC. Connectivity works and also OSPF adjacency is up, without authentication is used. So it'...
I have a Cisco ASA 5510 and when someone VPN's in they can't reach one of my subnets (10.0.10.X). This subnet is tied to my AZURE servers and when a user tries to do anything that will require ADFS it fails because it can't connect. If they discon...
Hi,If we use the asa 5545 at internet edge , what is the configuration best practices to get maximum throughput Thanks
Resolved! Latency through a vFTD transparent NGIPS
Hi, With a vFTD setup as an inline-set transparent NGIPS using the bare minimal settings we get huge spikes in ICMP latency for traffic going through it. The example in this post is just a test lab to keep it simple and prove definitely that it is ...
Hi,How the ips ,ngfw and threat protection throughput related to Firewall throughput And what is the difference between the ips ,ngfw and threat protection throughputThanks
Hi, can anyone explain the path for ASA and Firepower especially in relation to FMC. For eg, How does Firepower Defense Manager work in with a network that is running a FMC? If ASDM will no longer be used, which device will be used to push ASA Firew...
Resolved! SIP REGISTRATION FAILS ON ASA 5515x
Hello Gurus, I just signed up with an ITSP but been struggling with SIP registration. I use a Cisco CME and had initially thought I was configuring it wrong, or perhaps, the credentials were wrong. I configured the same credentials on a 3CX soft pho...
Resolved! ASA NAT into site-2-site VPN range
So, I have a site-2-site VPN connecting two ASAs, though I only have access to the config at my end.VPN endpoints are the outside interfaces. The ACL defining the VPN traffic includes my inside_network (connected to the inside if). So far so good. No...
