Hello, I want to understand the best and recommended way to initiate failover on a multi context ASA operating in Active/Standby Mode with 3 contexts. Failover testing is required for all contexts at once. Does doing a "failover active" on the system...
Dear Community Members, I have a locally managed (i.e.no FMC) FTD 2100 (OS: 6.4.0-102) appliance where I have configured and deployed SNMP using flexconfig. However, when the dedicated mgmt interface is polled by the SNMP server I see an ICMP port un...
Hi all, I need help with Port Forwarding. It's working but only when I also include the original port on the outside access. I have a server inside listening on port 443. I want outside clients to connect using port 50443. I can connect on port 5...
Hi there, i'm looking for a way to use PAP instead of MSCHAP for our VPN Remote Access.We've configured the Authentication with Cisco Anyconnect over an Radius Server (RSA).RSA couldn't work with MSCHAP so i'm looking for the settings to change the S...
HelloI am trying to remove a few contexts from the ASA. After that I am doing failover testing on the ASA. Does anyone have any proper procedure on how to perform a failover testing for a multicontext environment. This is very urgent so your help i...
Hi, I am day to day using Cisco ASAs and FTD / FMC for my company and gets lot of implementation requests and troubleshooting's. Is there Cisco LAB so that I can get above Cisco devices and test scenarios. I can buy from Cisco if they offer such serv...
Need to block vpn connection attempts from a couple IPs. I tried the below access list but it didn't work. How can I drop the traffic before it tries to negotiate phase 1?access-list cp-outside remark vpn block 1 access-list cp-outside deny udp host ...
I have a set up of a switch, ASA 5545, Cisco FMC and some servers.---Workstations---->Access Switch---->Cisco ASA---->ServersThe FMC is used to manage the sfr module of the ASA.At the moments workstations on the access switch have access to the serve...
Hello everyone, FPR2100 supports SFP-10G-ER and SFP-10G-ER-S (https://www.cisco.com/c/en/us/td/docs/security/firepower/2100/hw/guide/b_install_guide_2100/overview.html#concept_fcc_frw_1cb) The question is: Can we have on one end of the cable SFP-10...
Does ASA continue to try and send icmp messages to hosts that have been removed from configurations such as let's say Netflow exporter IP was removed or changed? Anyway to stop ASA from sending certain ICMP messages to certain destinatinos?
Hi,Can ASDM be started from the command line? If so, what is the proper command and arguements to give? I manage a lot of different firewalls and find the pull down list to be time consuming and harder to use than if I could create my own commands. T...
Hello Everyone, I am trying to configure EEM on an ASA 5545 to run the backup command daily to an SCP Server event manager applet SCPTESTlast file noneevent watchdog 90 secs, left 10 secs, hits 3, last 2019/09/24 15:39:11action 0 cli command "backup ...
Dears, I am planning to implement Fortinet Sand boxing solution and i have a ASA with firepower services, will this solution will work ??? the file which will be send to fortinet sandboxing by ASA will be recognized??? Please confirm.
HiI have this on my Cisco ASR 1001-X particulary for ipsec License State: Active, Not in Use, EULA not accepted Can anyone explain what it means please
I have a vendor that I need to set up a site to site vpn with and they want me to use public IPs in the encryption domain. Can anyone explain why they would want to do this or if it offers any security benefits or weaknesses?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide
| Subject | Author | Posted |
|---|---|---|
| 05-14-2026 11:33 AM | ||
| 05-05-2026 09:59 AM | ||
| 05-02-2026 06:09 AM | ||
| 04-30-2026 12:46 AM | ||
| 04-24-2026 07:04 AM |
| User | Count |
|---|---|
| 9 | |
| 2 | |
| 2 | |
| 1 | |
| 1 |
