I have a question regarding ASA session checkImagen this situationWe have an ASA which is Building two VPNs (Site-to-Site) to the Cloud and in the Routing table there is a loadbalancing to the Destination in the Cloud over the two VPN connections.(Lo...
Hi, Currently i have an ASA firewall on HO which is also the gateway for the users/servers etc... have a dark fiber connected to DR, we will have same subnet there and will have new firewall Cisco Firepower 4120. in the event the ASA goes down , how ...
I have a firewall Cisco ASA 5505, and currently it is a command line firewall. I want to configure ASDM so that i can use it as a GUI Web Base interface.I really dont know what to do. Can any one please help me how can i configure ASDM on my firewall...
Hi, I have cisco 5516x with firepower. My firepower install at FMC version 5.4.1. Below my question. 1. what is the best practice to update the rule ( System > Update > Rule Updates ) by weekly basis or monthly ? 2. Any impact during the rule upda...
So as the title states I am simply trying to open ports to the firewall for the purposes of VPN connectivity and copying the NAT/ACL rules seems to have no effect. I have changed the particulars for the ports but yet the newly copied rules and statem...
Hello!I make multiple dns server groups for ASA5525 asa991-smp-k8.bin like this: dns domain-lookup outside dns domain-lookup inside ! dns server-group DefaultDNS name-server 192.168.1.1 name-server 192.168.1.2 domain-name dns1.com ! dns server-group...
Hello, I have a FTD version 6.2.3.13 and an ACP containing 1000's of rules and hundred of zones.I want to block an application such as facebook for the entire environment. If I create a rule at the top of the ACP policy and set the zone and network a...
Is there a way to configure High Availability with another 2100 in FirePOWER Device Management? I know how to do it in FMC, but for this client it has to be on box. Both devices have two interfaces linking each other.I cannot find anything in the GUI...
Hi Guys, Getting the event backlog has increased message with a really large amount of MB attached to the message. Raise a tac case or is there a known bug?
Hi, we're having a problem with out ASA5506. The public interface "outsideSub" has internet connection via PPPoE.The ping test to a public DNS server from the outsideSub iface is successful. However, the package trace shows that TCP packets are block...
My FMC is configured with Active Directory as Identity Source. I have a rule that blocks websites categorized as Gambling for AD user group "RestrictedUsers". Now, I want to change my Identity Source from AD to ISE and retain the existing Rule i.e., ...
Say the interesting traffic is ANY source on the ASA where you have IPSEC tunnels built. If I ping a destination IP which is deemed interesting traffic, what is a good way confirm the traffic is taking the IPSEC tunnel?
I'm trying to remove multiple network objects in an ASA running 9.1(3), but first I have to remove the NAT relationships connected to them. When removing the NAT rules, I am still not able to remove the object itself. To enter config mode for the ob...
Hello All, I was checking to see if below command I can configure at FirePower 8370 Stack. But once I login to one of the 8370 stack member ( 8350 ) , i am not able to find this command available. Also how can I see this preserve-connection is enabl...
Even when all traffic is allowed I've noticed that I can't ping FTD interfaces except the "nearest" interface (traffic doesn't cross FTD).Is it possible to allow this traffic?
