HelloWe 're going to buy fpr9k-sm56-ftd-bun appliance and we want to install FTD image on it (not ASA image). We could configure it with the ASA image mode, but we couldn't find any option to select FTD image mode in the cisco build and price website...
Forum Posts
Hi All,On our ASA we have two Site-2-Site tunnels configured (and working). How would i/we be able to let traffic from Customer A flow to Customer B through the 2 existing tunnels. If crypto maps or anything need to be changed at the customer ends, t...
Resolved! Cisco ASA kills idle sessions
Hi everyone, I just got in a strange situation here. I've got an ASA 5516-x with Software Version 9.9(2)36. We have some services which are connecting from DMZ site to LAN site via 1521 (sqlnet) to an oracle database. Sometimes when there is no traf...
Hi Guy's!I have an issue I need some help with. In the log files we keep getting Deny tcp src outside: when this happens we are unable to receive some emails. I have attached a screen shot. Any help would be appreciated! Thank you! %ASA-4-106023...
Resolved! Cisco ASA 5515-X reimage to FTD 6.x
hi,i have an ASA 5515-X with SSD and would re-image it to FTD.i don't see any star/TAC recommended badge on either 6.3 or 6.4, i only saw a star in patch 6.2.3.13.does this mean i download and upgrade using these files (6.2.3):ftd-6.2.3-83.pkgftd-boo...
I am in the middle of editing a few long ACLs that were created before my time. What I noticed is that when they were orginially created each line was created in intervals of 1. I know that I can copy the ACL out modify each line to be in intervals o...
I need help please! We have an ASA firewall with multiple VLAN's configured. It is an old environment where we have servers configured with multiple NIC's with different IP addresses all in different subnets. We have a desktop VLAN, on the same ASA, ...
I was running a TraceRoute to a remote server that goes through our new ASA5516x Firewalls, via a Private link to our Partner site, I know it is at least 5 hops in to reach this server, as we just migrated from our older 55xx EOL Firewalls, and could...
Hi Community Members, I am new to Networking and have a question, that appears difficult to me but to experts like you, it can be an easy one Our LAN Subnet: 192.168.171.0/24Our VPN Subnet: 10.251.251.0/24 Our client has allowed our LAN subnet (192.1...
Hello,I actually reimed a cisco firepower 2100 in asa.The problem is that when I go to create the port channels I can do it without problems but I can't associate the ethernet with the channel-group x mode active command because it answers me that th...
Resolved! ASAs and more-specific static routes
I had a situation with an ASA 5525-X running 9.6(4)25. There was a static route in place for (say) 10.1.1.0/24 out of one interface, e.g.route intf-1 10.1.1.0 255.255.255.0 <next-hop> A more-specific route was then required out of another interface e...
Hi, experts.After applying in the FTD a rule to block the Teamviewer application for the internal hosts to internet (INSIDE to OUTSIDE),I found in LINA this: FTD-5516X-XXX# show access-list CSM_FW_ACL_ | i 268434489access-list CSM_FW_ACL_ line 219 re...
Hi Folks, I have an internal server that does not run Apache, it can be reached from external via port 80/443. I get a malware event alerts for dropped traffic from Outside to Inside for an inside server that does not have Apache installed. I though...
Hi Folks, If I receive an inbound attempt from outside to inside and it triggers snort rule 45304 (oracle weblogic signature). How do I know if this is relevant regardless of whether it is (oracle weblogic in this instance) actually installed/listeni...
Hi, When Firepower IPS picks up a bad attempt from the internet inbound it blocks it and sends an impact 1 event to my alerting. I typically do not need to action much for such blocked situations. I'd like to set my alerting up for the other directi...
