Hi all, I have a 5508-X running FTD v6.2.3-83; it is configured in routed mode with "the usual" configuration: outside and inside interfaces / zones with traffic allowed out but not in. I also have AnyConnect services for remote access VPN servicesI ...
Forum Posts
Hi Guys,Today i have a topology where i have a nexus 7K, where there are multiple VRFs that terminate on 4140 Cluster.One or more VRF is part of a zone on the Firepower. the Firepower doesnt have any VRF. Policies are used to control access to the d...
I did a upgrade of 2900 router version. After the upgrade lost connectivity to internet. Phones/Email everything is working fine. Unable to reach internet. Google IP 8.8.8.8 is not reachable.Also,I get theses errors in router log: FW-6-DROP_PKT:Drop...
Resolved! DHCP Scope using VPN Client
Have had great success here. Here is another one. We are moving from ACS to ISE and its working wellExcept...My VPN clients are picking up their DHCP address from a microsoft DHCP server.Their default gateway is wrong.The DHCP scope is 192.5.20.65-80...
Resolved! ZBFW: UDP timeout config for VPN
I have an IPsec VPN config which uses UDP 500 and UDP 4500. After adding a basic ZBFW config to block unsolicited incoming connection. I noticed my VPN is flapping occasionally. Since it does not occur consistently, I suspect it has to do with sessio...
High Availability is often a requirement for many of our customers. Cisco requires two (2) subscriptions for a high availability (HA) pair of appliances running Firepower Threat Defense software image, that is configured for active-passive operation....
Resolved! multiple netflow destination in asa
hi I am trying to configure two netflow destinations on asa 8.2 but only one work here is my configuration access-list flow_export_acl extended permit ip any anyaccess-list flow_export_acl-2 extended permit ip any anyflow-export destination xxxxxxx 1...
Hello all,I am trying to setup Anyconnect on my ASA which its outside IP configuration is DHCP, means I have dynamic IP address on my outside interface. Is it possible to configure Anyconnect with dynamic IP address or we have to order public static ...
We have an HA pair of ASA-5525x firewalls. Occasionally when we will deploy changes the SFR that is the standby mode will not update and the only way we have been able to correct this problem is to do a complete rebuild of the SFR module. We have tri...
Why is Pixabay.com blocked and marked as High Risk?https://www.cisco.com/c/en/us/td/docs/security/firepower/Application_Detectors/vdb_307/cisco_firepower_application_detector_reference_307/applications_p.html#wp3251917744It is used for stock images f...
Hello, On ASA Version 9.9(1)2, I'm trying to look at received-routes from BGP neighbor, but get this error: % Inbound soft reconfiguration not enabled on x.x.x.x. I can't see any commands in BGP to add the soft reconfiguration like we can in IOS. D...
We are behind in upgrading from version 5.4.X to Version 6.X. We currently have a FMC and sensor at version 6.4.0.1. Doing a side-by-side comparison from version 5.4.x, we see big differences in event generated. The sensors both monitor data from ...
Resolved! AAA stopped after implementing BVI
I recently modified our Cisco ASA 5516-X firewall (in routed mode), changing the "inside" interface from one of the GigabitEthernets to a BVI (IP 10.0.0.1). After doing so, I seem to have lost access to our Windows (DC) Domain Controller (IP 10.1.1....
I am in urgent need of finding a copy of the PIX to ASA migration tool. Does anyone happen to have or know where I can get a copy? It is no longer available on the Cisco download site. Thanks! -JP
Resolved! ASA Version 9+ ACL for NAT Hosts?
In understand order of operations are different. Let's say I wanted natted_host to reach ANY destination and ANY destination to reach natted_host which is on Inside interface. My ACL will still reference natted_hosts since they are being natted to ou...
