I have an IPsec VPN config which uses UDP 500 and UDP 4500. After adding a basic ZBFW config to block unsolicited incoming connection. I noticed my VPN is flapping occasionally. Since it does not occur consistently, I suspect it has to do with sessio...
High Availability is often a requirement for many of our customers. Cisco requires two (2) subscriptions for a high availability (HA) pair of appliances running Firepower Threat Defense software image, that is configured for active-passive operation....
hi I am trying to configure two netflow destinations on asa 8.2 but only one work here is my configuration access-list flow_export_acl extended permit ip any anyaccess-list flow_export_acl-2 extended permit ip any anyflow-export destination xxxxxxx 1...
Hello all,I am trying to setup Anyconnect on my ASA which its outside IP configuration is DHCP, means I have dynamic IP address on my outside interface. Is it possible to configure Anyconnect with dynamic IP address or we have to order public static ...
We have an HA pair of ASA-5525x firewalls. Occasionally when we will deploy changes the SFR that is the standby mode will not update and the only way we have been able to correct this problem is to do a complete rebuild of the SFR module. We have tri...
Why is Pixabay.com blocked and marked as High Risk?https://www.cisco.com/c/en/us/td/docs/security/firepower/Application_Detectors/vdb_307/cisco_firepower_application_detector_reference_307/applications_p.html#wp3251917744It is used for stock images f...
Hello, On ASA Version 9.9(1)2, I'm trying to look at received-routes from BGP neighbor, but get this error: % Inbound soft reconfiguration not enabled on x.x.x.x. I can't see any commands in BGP to add the soft reconfiguration like we can in IOS. D...
We are behind in upgrading from version 5.4.X to Version 6.X. We currently have a FMC and sensor at version 6.4.0.1. Doing a side-by-side comparison from version 5.4.x, we see big differences in event generated. The sensors both monitor data from ...
I recently modified our Cisco ASA 5516-X firewall (in routed mode), changing the "inside" interface from one of the GigabitEthernets to a BVI (IP 10.0.0.1). After doing so, I seem to have lost access to our Windows (DC) Domain Controller (IP 10.1.1....
I am in urgent need of finding a copy of the PIX to ASA migration tool. Does anyone happen to have or know where I can get a copy? It is no longer available on the Cisco download site. Thanks! -JP
In understand order of operations are different. Let's say I wanted natted_host to reach ANY destination and ANY destination to reach natted_host which is on Inside interface. My ACL will still reference natted_hosts since they are being natted to ou...
Hello.i have config on asa 5525-x v9.10.2 and before it. Config working fine.1) nat (internet,dmz) source static any any destination static x.x.x.x 10.200.5.1 service https https no-proxy-arp2) nat (inside,dmz) source static any any destination stati...
Hi Guys, I was trying to learn the Infoblox from the you-tube videos but it's a hard time for me to understand the actual Infoblox. Could you please provide me the docs or any similar links so that I can learn the Infoblox in easy way. I would appre...
Hi,I have two DMZ on an ASA running 9.9 which use separate public IP to the LAN, and this all works fine, traffic from DMZ2 (10.3.3.0/24) is NAT'd to 1.1.1.4 etc - see attached diagram. What I'm having problems with is I now need to forward inbound t...
Hi. I have virtual FTD 6.2.3 and I can't to deploy RA VPN - "Login error". In trubelshoting section of VPN in Firepower MC i have this message: AAA Marking LDAP server 172.20.10.100 in aaa-server group 172.20.10.100 as ACTIVE AAA Marking LDAP server...
