My question is pertaining to the flow of traffic with an ASA 5555X with the FirePower services module and a WCCP Redirect to a WSA appliance. I would think that the traffic flow should occur such as: Http traffic --> ASA --> FP IPS --> WCCP to WSA...
Forum Posts
Hello EveryoneWe would like to deploy our 4120 as a Multi-Instance Container to have more flexibility in the future, without the need to get new boxes.Now in the Multi-Instance Guide and the FTD/FMC6.4 it states that the following features are not su...
Resolved! ASA session Check in Asymmetric Routing
I have a question regarding ASA session checkImagen this situationWe have an ASA which is Building two VPNs (Site-to-Site) to the Cloud and in the Routing table there is a loadbalancing to the Destination in the Cloud over the two VPN connections.(Lo...
Hi, Currently i have an ASA firewall on HO which is also the gateway for the users/servers etc... have a dark fiber connected to DR, we will have same subnet there and will have new firewall Cisco Firepower 4120. in the event the ASA goes down , how ...
Resolved! How to configure ASDM on Cisco ASA 5505
I have a firewall Cisco ASA 5505, and currently it is a command line firewall. I want to configure ASDM so that i can use it as a GUI Web Base interface.I really dont know what to do. Can any one please help me how can i configure ASDM on my firewall...
Hi, I have cisco 5516x with firepower. My firepower install at FMC version 5.4.1. Below my question. 1. what is the best practice to update the rule ( System > Update > Rule Updates ) by weekly basis or monthly ? 2. Any impact during the rule upda...
So as the title states I am simply trying to open ports to the firewall for the purposes of VPN connectivity and copying the NAT/ACL rules seems to have no effect. I have changed the particulars for the ports but yet the newly copied rules and statem...
Resolved! ASA multiple dns server groups not work
Hello!I make multiple dns server groups for ASA5525 asa991-smp-k8.bin like this: dns domain-lookup outside dns domain-lookup inside ! dns server-group DefaultDNS name-server 192.168.1.1 name-server 192.168.1.2 domain-name dns1.com ! dns server-group...
Hello, I have a FTD version 6.2.3.13 and an ACP containing 1000's of rules and hundred of zones.I want to block an application such as facebook for the entire environment. If I create a rule at the top of the ACP policy and set the zone and network a...
Resolved! 2100 HA support in FDM
Is there a way to configure High Availability with another 2100 in FirePOWER Device Management? I know how to do it in FMC, but for this client it has to be on box. Both devices have two interfaces linking each other.I cannot find anything in the GUI...
Hi Guys, Getting the event backlog has increased message with a really large amount of MB attached to the message. Raise a tac case or is there a known bug?
Hi, we're having a problem with out ASA5506. The public interface "outsideSub" has internet connection via PPPoE.The ping test to a public DNS server from the outsideSub iface is successful. However, the package trace shows that TCP packets are block...
My FMC is configured with Active Directory as Identity Source. I have a rule that blocks websites categorized as Gambling for AD user group "RestrictedUsers". Now, I want to change my Identity Source from AD to ISE and retain the existing Rule i.e., ...
Say the interesting traffic is ANY source on the ASA where you have IPSEC tunnels built. If I ping a destination IP which is deemed interesting traffic, what is a good way confirm the traffic is taking the IPSEC tunnel?
Resolved! Removing Network Objects
I'm trying to remove multiple network objects in an ASA running 9.1(3), but first I have to remove the NAT relationships connected to them. When removing the NAT rules, I am still not able to remove the object itself. To enter config mode for the ob...
