Hello All, I have two Cisco ASA-5525-X in an HA pair. I also have two Anyconnect PAK's of AC-VPNO-100....Do I need to install 1 of each PAK on each of my ASA's which would come out to only 100 Anyconnect since its in an HA pair or do I need to instal...
Hello Cisco Community, i have an issue with Cisco AnyConnect, when Connect to Anyconnect it disconnect my internet, i tried to configure split tunneling but same issue happenedConfiguration Posted below,Kindly Need HelpASA Version 9.8(2)!hostname Hor...
I have setup a syslog alert, I enabled syslog at the access control policy and I enabled each rule for syslog but I am not getting any data at the syslog server. Is there somewhere else I need to go to get this to work? I am using FMC VM 6.3 and ASA...
Hello Everyone, I would like to expand ASA-5555 with a 6-port GbE card to have a total of 14 RJ-45 ports so I can use it as a replacement for my old catalyst switch. The ordering information table lists two part numbers for the card: ASA-IC-6GE-CU-C ...
I set Failover on ASA, but the following events occur.If you have similar experience, I would appreciate it if you could tell me the cause and the solution. ■ ASA Failover Problems・ After Act-Stby is switched from ASA # 1 to ASA # 2 by Failover due t...
Hi all, Our company has three branch offices. All these offices have an ASA5510 firewall installed. The three ASA's are sending syslog messages to a syslog server. All three devices are spamming the same "Deny IP spoof" message. Our provider has assi...
Hi -We have a lab pod configuration that forces traffic to specific pod routers via PBR on our core switch. When a user chooses a specific group when logging into AnyConnect, we apply a group-unique IP Pool, then enforce routing at the next hop.Whil...
Hello,I can't remember the command that shows that you are on the active or standby ASA when you log in?The hostname will look something like:ASA5520-1/stby> ASA5520-1/Act> Thanks
Hello,On my ASA 5525-X, this message "Deny udp reverse path check on interface x" annoyed me very much each time after deleting and then reinstallating the VMs.It happened between v-management hosts and vcenter host.The workaround is: clear route all...
What is DEVISO? Does it is an appliance or software? Thanks
Hello all, i have a firepower 2110 in my network and i want forward all dns request from my inside interface through a L2TP to a server, is that possible? if not possible can i forward just the request to a particular domain? or what's the best optio...
I was able to import a copy of the 5.4 PIX Shun Remediation module into my system running 6.2.3. It works, but only if SSH v1 is enabled on my ASA, with v2 it doesn't. I ran debug ssh on the ASA when trying with version 2 and this is what I got:Dev...
Hi everyone, I am new in networking, and they ask me to configure an ASA 5508-X with FirePower. But it does not have anyconfiguration files and ios image. Does anyone know how to load an IOS image for this ASA 5508-X from rommon mode?Thanks in advanc...
HiWe have a requirement to set up a s2s VPN tunnel with a third-party. Our firewall is ASA 5545 and they use Forcepoint.They have a primary peer and a secondary peer and they want us to use IKEv2 and configure it policy based than route based. Would ...
So on a 4100 Firepower, I see the command "crypto map vpn_map1 2 set reverse-route". I am not all sure it is needed. The IPSEC profile is for has all static IPs on both ends (for sources, destinations, etc.).No IGP protocols are running the the FW.An...
