I'm fairly new to ASDM so I apologize for this noob question. I need to see what is actually passing through a specific source IP and destination IP, my goal is to identify which specific ports I'm missing on an IP ruleset. My logging is setup to "De...
Forum Posts
Hello Everyone. I have installed CISCO ASA Version 9.10(1).11 on a FTD-2110 appliance. This appliance answer on both 192.168.45.1 and 192.168.45.45. To get to the firepower software you go to 192.168.45.45(then from there you can access the asa) or ...
Resolved! Is there an "All-Other" zone in ZBFW?
Do I need to define a zone-pair for each and every possible zone-pair combinations? Can I define a zone-pair that is sourced "All-Other-Zones". My guess is no, but I have to ask. Configuring all those zone-pairs are kind of a PITA.
Hi, I have this configuration in GNS3 with FTD. I can't access Internet from the Inside interface and I can't figure why. Could you please help me? : Saved:: Serial Number: 9A2HWHFXJEA: Hardware: ASAv, 8192 MB RAM, CPU Pentium II 2600 MHz, 1 CPU (4 c...
Hi all, I have a 5508-X running FTD v6.2.3-83; it is configured in routed mode with "the usual" configuration: outside and inside interfaces / zones with traffic allowed out but not in. I also have AnyConnect services for remote access VPN servicesI ...
Hi Guys,Today i have a topology where i have a nexus 7K, where there are multiple VRFs that terminate on 4140 Cluster.One or more VRF is part of a zone on the Firepower. the Firepower doesnt have any VRF. Policies are used to control access to the d...
I did a upgrade of 2900 router version. After the upgrade lost connectivity to internet. Phones/Email everything is working fine. Unable to reach internet. Google IP 8.8.8.8 is not reachable.Also,I get theses errors in router log: FW-6-DROP_PKT:Drop...
Resolved! DHCP Scope using VPN Client
Have had great success here. Here is another one. We are moving from ACS to ISE and its working wellExcept...My VPN clients are picking up their DHCP address from a microsoft DHCP server.Their default gateway is wrong.The DHCP scope is 192.5.20.65-80...
Resolved! ZBFW: UDP timeout config for VPN
I have an IPsec VPN config which uses UDP 500 and UDP 4500. After adding a basic ZBFW config to block unsolicited incoming connection. I noticed my VPN is flapping occasionally. Since it does not occur consistently, I suspect it has to do with sessio...
High Availability is often a requirement for many of our customers. Cisco requires two (2) subscriptions for a high availability (HA) pair of appliances running Firepower Threat Defense software image, that is configured for active-passive operation....
Resolved! multiple netflow destination in asa
hi I am trying to configure two netflow destinations on asa 8.2 but only one work here is my configuration access-list flow_export_acl extended permit ip any anyaccess-list flow_export_acl-2 extended permit ip any anyflow-export destination xxxxxxx 1...
Hello all,I am trying to setup Anyconnect on my ASA which its outside IP configuration is DHCP, means I have dynamic IP address on my outside interface. Is it possible to configure Anyconnect with dynamic IP address or we have to order public static ...
We have an HA pair of ASA-5525x firewalls. Occasionally when we will deploy changes the SFR that is the standby mode will not update and the only way we have been able to correct this problem is to do a complete rebuild of the SFR module. We have tri...
Why is Pixabay.com blocked and marked as High Risk?https://www.cisco.com/c/en/us/td/docs/security/firepower/Application_Detectors/vdb_307/cisco_firepower_application_detector_reference_307/applications_p.html#wp3251917744It is used for stock images f...
Hello, On ASA Version 9.9(1)2, I'm trying to look at received-routes from BGP neighbor, but get this error: % Inbound soft reconfiguration not enabled on x.x.x.x. I can't see any commands in BGP to add the soft reconfiguration like we can in IOS. D...
