Hello Everyone. I have installed CISCO ASA Version 9.10(1).11 on a FTD-2110 appliance. This appliance answer on both 192.168.45.1 and 192.168.45.45. To get to the firepower software you go to 192.168.45.45(then from there you can access the asa) or ...
Forum Posts
Resolved! Is there an "All-Other" zone in ZBFW?
Do I need to define a zone-pair for each and every possible zone-pair combinations? Can I define a zone-pair that is sourced "All-Other-Zones". My guess is no, but I have to ask. Configuring all those zone-pairs are kind of a PITA.
Hi, I have this configuration in GNS3 with FTD. I can't access Internet from the Inside interface and I can't figure why. Could you please help me? : Saved:: Serial Number: 9A2HWHFXJEA: Hardware: ASAv, 8192 MB RAM, CPU Pentium II 2600 MHz, 1 CPU (4 c...
Hi all, I have a 5508-X running FTD v6.2.3-83; it is configured in routed mode with "the usual" configuration: outside and inside interfaces / zones with traffic allowed out but not in. I also have AnyConnect services for remote access VPN servicesI ...
Hi Guys,Today i have a topology where i have a nexus 7K, where there are multiple VRFs that terminate on 4140 Cluster.One or more VRF is part of a zone on the Firepower. the Firepower doesnt have any VRF. Policies are used to control access to the d...
I did a upgrade of 2900 router version. After the upgrade lost connectivity to internet. Phones/Email everything is working fine. Unable to reach internet. Google IP 8.8.8.8 is not reachable.Also,I get theses errors in router log: FW-6-DROP_PKT:Drop...
Resolved! DHCP Scope using VPN Client
Have had great success here. Here is another one. We are moving from ACS to ISE and its working wellExcept...My VPN clients are picking up their DHCP address from a microsoft DHCP server.Their default gateway is wrong.The DHCP scope is 192.5.20.65-80...
Resolved! ZBFW: UDP timeout config for VPN
I have an IPsec VPN config which uses UDP 500 and UDP 4500. After adding a basic ZBFW config to block unsolicited incoming connection. I noticed my VPN is flapping occasionally. Since it does not occur consistently, I suspect it has to do with sessio...
Resolved! multiple netflow destination in asa
hi I am trying to configure two netflow destinations on asa 8.2 but only one work here is my configuration access-list flow_export_acl extended permit ip any anyaccess-list flow_export_acl-2 extended permit ip any anyflow-export destination xxxxxxx 1...
Hello all,I am trying to setup Anyconnect on my ASA which its outside IP configuration is DHCP, means I have dynamic IP address on my outside interface. Is it possible to configure Anyconnect with dynamic IP address or we have to order public static ...
We have an HA pair of ASA-5525x firewalls. Occasionally when we will deploy changes the SFR that is the standby mode will not update and the only way we have been able to correct this problem is to do a complete rebuild of the SFR module. We have tri...
Why is Pixabay.com blocked and marked as High Risk?https://www.cisco.com/c/en/us/td/docs/security/firepower/Application_Detectors/vdb_307/cisco_firepower_application_detector_reference_307/applications_p.html#wp3251917744It is used for stock images f...
Hello, On ASA Version 9.9(1)2, I'm trying to look at received-routes from BGP neighbor, but get this error: % Inbound soft reconfiguration not enabled on x.x.x.x. I can't see any commands in BGP to add the soft reconfiguration like we can in IOS. D...
Resolved! AAA stopped after implementing BVI
I recently modified our Cisco ASA 5516-X firewall (in routed mode), changing the "inside" interface from one of the GigabitEthernets to a BVI (IP 10.0.0.1). After doing so, I seem to have lost access to our Windows (DC) Domain Controller (IP 10.1.1....
I am in urgent need of finding a copy of the PIX to ASA migration tool. Does anyone happen to have or know where I can get a copy? It is no longer available on the Cisco download site. Thanks! -JP
