I have a HA pair of Virtual FTDs on a couple of ESXi 6.5 hosts in the lab. They were built with the 6.4 image and are using the local FDM management. They have been patched a few times with the 6.4 patches and are currently running 6.4.0.5-23.I hav...
Forum Posts
Hello, I have two ExpressRoute connections to Azure. They are on the ASAs. (Please see network diagram). Firewalls are running as standalone - no failiover pair. Core switch is running OSPF with firewalls. Firewalls are peering with AZURE using BGP. ...
Hi All, I have a request to open http port from the below addresses , we have route already in place and phones work as they should...but they cannot access the phones gui from their end... So am i right thinking its juts a matter of cr...
Hi people.Please can you help me?I erased disk0 and whenever i upload the ios after a reboot it doesn't boot while when the ios is uploaded works ok.Did i miss a command that i have to type to save it?show flash doesn't show the ios installed.
I have Cisco ASA 5516 and i want to connect fortigate via IPsec . IPSec its done but i cant ping from my local to remote, and remote to local. Maybe someone to help me solve this issue.In this issue from my local server can ping gateway on fortigateb...
Hi, Is is possible to run multi-context mode in ASA5516X? If yes, how do we redirect the traffic to SFR module, is it a per context basis? Thanks
I have an ASA-5516-X that I'm migrating an old 5510 to. As an example I have the below, which is trying to take inbound port 54321 and routing that to 'thing:80' inside. object network thing host 192.168.1.27 nat (inside,outside) static interface se...
Hello Experts, I have seen in ASA firewall for enabling VPN site to site they use below 2 commands. 1. Crypto isakmp enable outside2. Crypto ikev1 enable outside. As for my understanding the 1st command is used before 8.4 versions of ASA. Please corr...
We recently put in a secondary internet connection across the state. I have the primary connection coming into our main office. Both connections come in to ASA's that are set up in a failover pair. Topology Between Connections Primary ISP > 4500x ...
Hello Everyone,It may very well be the time of day I'm writing this and long hours of looking at the screen.. but I'm setting up a lab ASA with an inside and outside interface. Inside interface is connected to a L3 Nexus 3064 using a transit VLAN ( 1...
I am looking for advice on which tools people are using to analyse syslog data from their Firepower modules to get detailed information on user Internet access. I am able to send the data to our syslog server, and have set up the free version of Splu...
Resolved! ASA NAT rules
Hello,I have a question about NAT rules on the ASA: they have no action statement and could anyone please tell me do they actually do anything?I am attaching screenshot.
Can someone help me to understand how a firewall makes a routing decision? I have some traffic which needs to get to a subnet not directly attached to the firewall. there is a static route to that subnet, however the nameif subinterface is not the s...
Trying to find a way to create a site to site tunnel using something more similar to ACL on ASA. For example we have a remote appliance that needs to have a site to site to main network using 10.0.0.0/8 as destination (or would have to list out 100+...
Hello Experts, Is the below NAT statement is correct. There is 2 different object provided in the destination nat (Outside,Extranet) source static CS_App_2 CS_App_2 destination static obj-10.155.185.220 obj-125.16.239.77 Also please provide me the re...
