We are planning to deploy NGFWv in AWS for Secure access to Internet for Central Patch Mgmt Servers. Connection will only be initiated from AWS Servers to Internet. I am not able to find any design/deployment Guides for such scenario. My questions ar...
Forum Posts
Hello Team,I have a question about Firepower local users. I see one local user admin but in document there is another local user called casuser. I was looking about casuser in Cisco website but no luck. Could you please help me about "casuser" in IP...
Hi,We have a schedule ASA (HA) 5585-X up-gradation scheduled for next week end. Current ASA version is 9.1(6)10, & we are planing to upgrade to 9.8(4) 10 version.Please let me know, if i can directly upgrade to 9.8(4)10 version from current 9.1(6)10,...
Hi,C:\Documents and Settings\Administrator>tracert fast.comTracing route to fast.com [23.50.182.181]over a maximum of 30 hops:1 <1 ms <1 ms <1 ms 10.0.10.12 <1 ms <1 ms <1 ms 172-16-10-253 112 ms 112 ms 112 ms 172.16.10.104 * * * Request timed out.5 ...
I have an ASA-SSM-20 module seems to be faulty on an ASA. I've been looking around the net and it looks like these modules usually come in 2 flavours - AIP-SSM-20 and CSC-SSM-20. The output from the ASA doesn't specifiy whether it is either of these....
Dear Team: is there any Cisco documentation for Upgrade Procedures on ASA 5525-x from 6.2.2 to the last release 6.3? I've seen int the web page a file name but with a different extension ".tar" https://software.cisco.com/download/home/286271172/type/...
All, I received a SSM-20 (Cisco Content Security and Control) for use with the ASA 5540. However I saw that the module does not have a software installed. Its status stays all the time as Unresponsive. ciscoasa# show module 1 detGetting details from ...
Resolved! Best Practice for VPN traffic Policys
Hi,New the world of FirePower and FMC. Have a Firepower 2100 appliance between my main router and Core Network switch. Have an IPSec Site to Site VPN back to HQ that terminates on my main router. In my FirePower Access Policy I have rules that ca...
Resolved! Firewall HTTPS Traffic Flow
Trying, through ongoing research and troubleshooting, to configure an ASA5525 running version 9.8(2) to allow bidirectional traffic from two ESXi 6.7 VMs from an UCS C240 M5 through the ASA to a remote server that “telnet <DNS Name> 443” from my lapt...
Resolved! 2 distribution switches to 1 ASA
Hello, I've built a reasonable large topology in GNS3 to show use of a variety of layer 2 and 3 technologies, with just a touch of ASA or enough to demonstrate ASA basics and setup of a site-to-site VPN. As a result and most importantly because I can...
I have configured IDFW (There is LDAP connection with the AD parent domain ), ASA and the users are all over the AD forest. We can query the users inside the parent domain but not at the child domains. Is there a possibility to configure LDAP with p...
While configuring an interface for a FPR2110 using FMC 6.4.0.4 I created a new security zone. While creating this zone, I mislabeled (typo) the zone. I was able to create a new zone with the correct label, but I cannot determine how to delete the i...
I have been looking at the logs on my firewall and have noticed that the source IP is not always an address on my LAN. How is it that source IP's are not on my LAN?
Hello all,I have to create a topology for VPN connection of the branches with the HQ, to access the servers. My question is: Which FW series (ASA, FRP...) to employ at the HQ and which one to the branches. Branches are small offices up to 10 employee...
