Hi! Since recent availability of ASAv for Microsoft Azure I have question about network design. Currently it is possible to have 4 network interfaces in ASAv, so we limited to 3 subnets in Azure VNET. We have more than 3 subnets and Azure Gateway for...
Forum Posts
Firepower management centre is not able to deploy policy to sensor modules. I have tried to deploy manually.Just noticed there appears to be some deployment failures and it has advised we raise a TAC case.I have tried to manually deploy and it still...
Hi, I am having proglem to get work from outside network to inside network. I have made nat rules etc already and giving permissson, tried use tcp and udp ports. Inside network everything is working. I have tried 1433 and 3838 ports both are working ...
Hi all, In the production network, we are using firepower 9300 with ASA 9.8.2. during NAT translations we are getting " Duplicate TCP SYN from CGN_INTERNET: X.X.X.X/58487 to CGN_INTERNET: X.X.X.X/25268 with different initial sequence number". please ...
Hi all We have an ASA 5510 which was installed at a site some time ago, however I have recently migrated the site's traffic to it away from a previous router (Meraki device of some description) There is a CUCM server with a SIP trunk to the inter...
Resolved! Deploy SFR: Inline or Monitor
DearHow are you? Implementing two sfr modules in ASA failover firewall will be managed by an FMC. For 3 weeks you will be only monitoring the traffic and analyzed through the FMC to define the signature bases that we will block, I have a period to le...
Resolved! tricky NAT issue on ASA 9.1
hi guys, I m facing a tricky NAT issue here, it's quite strange....here is the story :we have a subnet 192.168.2.0/24 and have 2 public IP on ASA(9.1)all the subnet is dynamic NAT to the outside interface.and now I want to add an internal IP to stati...
Hello everyone, I'm currently running Firepower 6.2.3.9-54 on ASA 5516-X 9.8(3)-16 (currently running in monitor only mode). I've created an SSL Policy and attached it to an ACP. The SSL Policy is configured to 'Decrypt - Known Key' for a single web...
I am trying to open up all the ip ranges that Cisco says it needs for webex to talk to my sparkboards. Is there an easy way to create a network object group that has multiple ranges in it? I am running ASA 9.8.2 if that makes a difference. So for...
Hello, I've been working on this and could not find out why.I have an esxi server and a web server.I can port forward to my test webserver with no problem using:static (inside,outside) tcp interface 8080 192.168.6.251 www netmask 255.255.255.255 But...
Hi everyone,I have a network behind a ASA5515X with Internet access.When any PC (behind the 5515x) tries to connect to a remote FTP server, it is possible, but when the FTP client tries to list (LS) o execute DIR inside the FTP server, the command is...
Hello, Can Cisco ASA 5500-X with FirePOWER Service be used as a proxy server as well as for firewall and VPN features? If so, how can this be achieved?
I have an ACL that shows in Details window when looking at IPSEC connection on ASA, however from CLI I don't see the ACL applied to an interface via Crypto Map. Are there other ways to apply ACL on ASA interface?
Does Firepower have the ability to query the Firepower API for an MD5 to see if FP has seen it before? Does Firepower have the ability to block a given MD5 via the API?
