On the ASAs (8.x) when i creare a crypto map it automagically adds:set security-association lifetime kilobytes 4608000I have been able to change the number of kilobytes but have not been able to remove this setting entirely for tunnels where we do no...
Forum Posts
Resolved! NAT reverse path failure
I have a wan router(70.70.70.129) from where I need to access a syslog server on inside with its real ip address(192.168.1.192). I have setup an access list on outside int:access-list outside_acl extended permit udp host 70.70.70.129 host 192.168.1.1...
Hello, I am trying to setup site to site VPN with NAT ip address inside. I can ping through to the absolute destination but cannot ping through to the NAT ip address. VPN Tun inside NA...
Hello, We have a Cisco ASA 5516 that we use for public networking. We have a single IP on the outside interface and IP a /22 block on the inside interface. The need has come up to privately IP something behind the firewall. So i have added an IP to...
Good Evening, I have an ASA 5516-X running the traditional ASA image which is working fine at the moment however I would like to replace it with FTD. I've got another ASA 5516-X which is running the latest FTD image, we are managing this locally thro...
Hi , I have ASA 5516-x with Firepower services and on FMC i have this error message: Memory Usage - Memory Test Used 13016.10MB of 13512.55MB (Physical + Swap) I have also notice that scheduled backup is not running because of low memory. Could n...
Hi All,In our company we are trying to Introduce a new ASA5516-x series with firepower to our existing network, the plan is only to keep this device in transparent mode and use this only of AMP and IPS inspection,we have done configuring this device ...
Resolved! Cisco FMC 4500 Installation Failure
Hello, today we got new FMC 4500 devices. we tried to configure initial setup but it doesn't show anything. we followed the Cisco document. can anyone help me with this? Thanks Harish
Resolved! Cisco Firepower 2130 URL Filtering
Hi there, I'm new to Cisco Firepower. We are in process to migrate from Cisco ASA 5510 to Cisco Firepower 2130. We are going to use FDM and not FMC. My Question/Query: What is the best way to implement URL Filtering!! Should I configure URL filtering...
As we know, an ACL can get really long especially when it comes to blocking malicious sites or IPs. Would it be better to block via a IPs sensor/device? If so, what are the main reasons why?
Hi guysI have a requirement to separate 5 VRFs into nexus VDCs.While each VDC will host the relevant VRF and terminated on the Firepower FTD.In regards to the Cluster Control Link, Since the firepower will have specific interfaces into different zone...
Hello can anyone provide there assistance in guiding me as to what I can do to resolve this issue if you have experienced this issue in your career. I'm at a complete lost. I would be grateful. I try to fail over to the second same issue took place. ...
What is the best practice of having VRF configured on nexus 7k, with several subnets(VLAN interfaces) but termination on the firewall? At least how to have those configured from the firewall perspective?I have different security zones to be configure...
Hi all,I know the purpose of SSL certifcates, but i'm far from a expert on that side. I think i have 2 simple questions:When i need to renew a certificate, do you always have to create a new CSR?I don't understand the purpose of Trustpoints. When you...
I am looking to create an IP SLA to send constant pings to a remote device to Outside of the ASA Outside interface, send a syslog if pings fail, but take no other actions.Here is what I got so far but I am not sure of syslog part. sla monitor 100 ty...
| User | Count |
|---|---|
| 10 | |
| 5 | |
| 5 | |
| 2 | |
| 1 |
