So if an IPSEC tunnel on ASA is down, only traffic I see in logs show IKE Receiver received on (IP of our local FW) from the (Peer IP of tunnel) but no IKE Response messages are sent back from our Firewall. Shouldn't I see this type of traffic in the...
Forum Posts
Dear all, Currently i have 2 wan internet connection and i'm using sla monitor for Active and backup. and it is working fine when the Active down , the backup link will switch to Active auto. my issue that i want to monitor ( ping ) on Backup connect...
Hello, I'm trying to configure a bridge group for example: interface BVI2 nameif inside security-level 100 ip address xx.xx.xx.xx xxx.xxx.xxx.x interface GigabitEthernet1/2 bridge-group 2 nameif inside_2 security-level 100 interface GigabitEthe...
have an issue. I have a Microsoft DHCP server behind a context firewall.My VPN clients come in through a different firewall (5510). I need to have them pick up a DHCP address from the appropriate scope. This works if the DHCP is defined on the 5510 ...
Resolved! Firepower 4100 ACP rule not working?
Hi,I have rule 23 that allows all private IP address (IPv4 RFC1918 group object) to use ICMP and use TCP port 49 for TACACS+ to a specific IP (let's say 10.10.10.31). This rule seems not to work as I get the below result from a packet tracer on the F...
Resolved! Snort Scripting
Hello Is there a way to write custom SNORT rules (for IPS) and OpenAppID scripts(for a new Protocol or an APP) and use them in FTD or Firepower Services?Links would be appreciated.
Resolved! FTD/FMC host limitations for DHCP v6.3
When using the ASA as a DHCP server, it is limited to 256 hosts. Does the FTD have the same limitations? The mask can be 255.255.255.0 or smaller. Thanks in advance!
Any ideas why I cannot SSH from any clients on the 192.168.68.0/24 network to the inside interface IP of the ASA?namesname 192.168.68.0 Net-NY2-SERVERSname 192.168.168.64 Net-NY2-NETWORKip local pool temppool 192.168.0.10-192.168.0.15!interface Gigab...
Team, We currently have about 40 sites, with each one of those sites they each have their own domain and are split between 5 different FMCs. Each site has either 1 or 2 "Internet" connections, with at minimum one of those connections is back to the "...
I have down loaded the new tool. It will not open in a Chrome or any browser. I had no trouble with v1.0.1 Anybody else run into this?
Resolved! ASA5525
can some please help me with this issue ? asasfr-boot>system install ftp://10.30.2.40/asasfr-sys-6.2.0-362.pkg Verifying 111Upgrade aborted. ASA-5525-1(config)# SH RUN BOOT boot system disk0:/asa981-smp-k8.binboot system disk0:/asasfr-5500x-boot-6.2....
I have one doubt, do I have to clear the interface statistcis "clear traffic" and then take the output of "show traffic" or its to take without clearing the traffic.Below chart displays the throughput calculated without clearing the traffic rates -...
Resolved! Nat traversal
What is the exact use of nat traversal .Can anyone explain with a scenario.
Hey Champs, I just started to working on a cisco environment and I need your help for Cisco Secure ACS and Cisco Prime Infrastracture tools. How do I learn it.? Please share me the related docs file or any other materials to learn those things in eas...
Resolved! Firepower NAT confusion
Hi All, I'm currently writing a migration document to move from SOPHOS UTM to Firepower and i'm getting a little confused with Firepower NAT.Lets say i want to configure what i used to call a "masquerading" rule (NAT Overload or PAT)I create a Dynami...
