Hi everyone, I hope someone can help me out here. I have an IPSec tunnel set up between a Palo Alto and Cisco ASA. The tunnel is up and running and is passing LAN/WAN traffic. So far so good. On Thursday, the users on site were migrated to Office 365...
I have a firepower 1010 I am trying to configure for a customer. It is going in place of a router that is there now. internal ip for example on firepower is 192.168.1.10 and this is the default gateway for all computers then we have another router ...
I am unable to update my ISR 4331 IOS-XE 16.6.4 Snort IPS signature from the base 29.0.C. I have also tried the latest signature (UTD-STD-SIGNATURE-2983-71-S.pkg) and receive the same error message. No issues contacting the HTTP server and copying ...
I have an issue with a VPN between an ASA 5515 (9.1(7)29) and a Fortigate 501E (5.6.8). We have the Cisco ASA and the customer has the Fortigate. Both are configured to have an L2L VPN between them. The VPN is up and we see traffic being encrypted an...
im shifting a new fmc+ftd instead of an old asa firewall , i was wondering after i shift the new fmc+ftd with the same inside and outside ip addresses if i need to clear arp my layer 3 core switch and my isp router?
For the life of me, I can't figure out what is causing my NAT problem. I ran a packet trace from 10.0.0.1 to 8.8.8.8 and received "(nat-xlate-failed)NAT failed" message. All I'm trying to do is to allow any host from 10.1.1.5 subnet to go out to the ...
It happens couple times that after I forgot to stop a real-time packet capture, I could not enter into Lina CLI. Going to expert mode is OK. I am thinking if there is a way to kill the process under expert mode. I am pretty sure that the capture is c...
Hello together, I have 2x5525-X (in a Failover-Cluster config) and (first Version from 2015) with the old IPS Software Modul. I want to upgrade the 5525x Hardware with 2x5525-FP-UPG Pack, so that i can use the new Firepower Services. So anyone here, ...
Hi experts,I would like any suggestions on this topology. We are is the middle of replacing our old ASA5520 with the new FirePower. Our current firewall terminate our IPsec tunnels and the GRE is terminated on the first inside router's loopback on th...
i have fmc+ftd 2110 and almost 100 rules . can i enable logging for all rules or will it cause cpu and storage issue for the fmc?
Dear All; I tried to block TOR browser by ASA 5515 FirePOWEP and FireSIGHT 5.3.1 using TOR application, And there's no results and no connections view as well. Please let me know if this issue has been solved with FirePOWEP and FireSIGHT 5.4.1 or 6 v...
Hello guys ,i bought a new cisco asa 5506-x with URL filtering license and i blocked some sites which is cool ,but now some users on the network are using tor browser to bypass the firewall and i can't do anything about it , so is there some way to b...
Hello , <164>Sep 03 2019 13:43:18: %ASA-4-106023: Deny tcp src Inside: x/3031 dst Outside:x/135 by access-group "Inside_access_in" [0x0, 0x0] <164>Sep 03 2019 13:43:18: %ASA-4-106023: Deny tcp src Inside: x/3031 dst Outside:x/135 by access-group "Ins...
Hi I have a ASA 5506 in transparent mode, I wanted to see if there is a maximum amount of interfaces I can add to a BVI on the 5506 using 9.8.2. Many Thanks in advance
Hi I am running the following sfr but when trying to update to 6.2.3.3-76 from the GUI it fails Model ASA5506 Serial Number ***** Software Version 6.2.3 (build 83) OS Cisco Fire Linux OS 6.2.3 (build13) Snort Version 2.9.12 GRE (Build 327) Rule Up...
