On an ASA, I know I can see the rule which a incoming/outgoing packet is applied to when doing packet-tracer and it is blocked (click on link to see in the results) but how about which exact rule it uses when the packet/connection is successful?
Hello everybody, Since some weeks, I have this alert on my Zabbix Server (Like Nagios) for my Cisco ASA : MEMPOOL_HEAPCACHE_0: High memory utilization.This ASA it's only use for VPN client Access.ASA Version : 9.10 Thanks for your help !
Does anyone have experience with configuring WCCP on an FTD box? It appears that the configuration is performed through FlexConfig. We have a Forcepoint content filter that we previously had integrated with our ASA, but we are looking to move to FTD ...
Hi guys,
I have this "common scenario" where ASA drops traceroute traffic.
C:\Windows\system32>tracert -d 10.22.10.63
Tracing route to 10.22.10.63 over a maximum of 30 hops
1 <1 ms <1 ms <1 ms 10.22.20.2542 2 ms 2 ms 2 ms 10.22.25.43 * * * Reques...
Does anyone know where I can get a listing of all the continent’s and countries listed in the FMC geo location blocking? Rather than snipping out a bunch of screen prints, It's much easier to just send a listing of all the locations to my management ...
Hi - How to determine FP2100 in asa mode installed with anyconnect license?
Below is the show version outputs. It said AnyConnect Premium Peers : 3500
Does it mean this box is capable to handle up to 3500 anyconnect client or client-less connecti...
Hi, I have have an ASA 5520 wokring in multiple context for years now.Till now the first context was using the interfaces 0/0 and 0/1 and the second context the interfaces 0/2 and 0/3 But recently I had to add another lan to this configuration but, b...
Trying to configure a BVI interface on a 2120 FTD that is managed via FMC. I'm running 6.3.0.1. When I go to Device Management > Interfaces and select the Add Interfaces drop down, I don't get the option for Bridge Group Interface. I just see +Sub I...
Hello All
CSMs GeoIP Database wasn't updated since last year:
https://software.cisco.com/download/home/286321073/type/284963388/release/2018.12.26
Also when checking under Tools -> IP Intelligence Settings there is no update since a while.
The ma...
Hello guys,We have upgraded the asa software from version 7.x to version 9.1(7)32. After the upgrade, client laptop using Cisco vpn client 5.0.07 can't not use vpn. This vpn client version worked well when the ASA running software version 7.x So ple...
Hi, AllI have ASA 5525 with SFR and firepower, the license expired and I cannot renew it at this time, my question can I skip the policy rules in firepower and allow users to access some websites blocked by the access rule and can I give the manageme...
Hi,
I've been struggling with an Active Authentication lab environment in my ASA FirePOWER version 6.2.2. I want to have a custom page so that anyone who wants to connect must enter credentials (if existing in my Active Directory server) or specify h...
Please I need your help and clarifications on some features on the new Cisco firepower management center. we recently got these new NGFW but I discovered after analyzing running configuration with Nipper Studio, I discovered some configurations are...
