I am new to ASAs, but I am trying to ensure connectivity between my internal LANs which hang off a subinterface. Any reason I am unable to ssh/ping 192.168.255.129 from the GreenNET network if the same security traffic is enabled? interface Port-chan...
Forum Posts
Hi all, We are having trouble with SIP inspect on our ASA when using NAT. The call flow is IP Phone -> CUCM -> CUBE -> ASA -> ITSP In the majority of cases, this is working correctly, but in some cases (maybe 1 call in 50, but frequency varies), the ...
Resolved! Mount USB stick on an ASA 5505?
Hello,I have an ASA 5505 and the built in flash is pretty small and I need to put 3 .pkg on it for Anyconnect 4.I formated an USB Stick (4GB) to FAT32 and put in the USB Port 2 on the back and rebooted the firewall.But in the filemanager I see disk0 ...
Dear all, I was wondering if you could give me some ideas about this issue. We were alerted through our monitoring system that three interfaces on our ASA5515 (ASA 5515-X with SW) were having an issue: - asa_mgmt_plane - Internal-Data0/1 - mgmt_pla...
Hi I attempted an upgrade of a ASA 5585-X cluster from v.9.1(2) to 9.10(1). The actual upgrade was fine but then we noticed that a large number of servers behind the firewall could not be accessed. This seemed to be intermittent, as some were ok ot...
I have setup WebVPN clientless SSL VPN so our users that are external login and there is a link to our company intranet website. Any of the links that exist on the website or are internal on our LAN/WAN work correctly. My problem is this website has ...
Dears, i am ordering the below ASA5525-X without firepower services SSD, is it possible to order IPS license for this ASA 5525-X can anybody share with me the part number, hence i don't think so there is any part number becz previous we use to get a...
Hi all, I'm going to upgrade a customer's HA pair of FMC2500 from 6.2.2.1 to 6.3.0.2.The release notes state the following:-#################################################Preinstallation Hotfix for MC1000, 2500, and 4500 (Required)Deployments: Fire...
Hi Expert, Customer is looking for Active/Active deployment for NGFW 4100. The solution is to use firewalls in cluster setup and make A/A by using Etherchannel load balancing scheme. Queries are: 1. Can it be deployed for two firewalls setup? 2. Wi...
Hi all, i have a brand new ASA 5505 which wont let me access with either https or asdm. I tried from 2 different computers, with manual IP settings and DHCP from the ASA. I can ping the ASA and connect via terminal but not with https and asdm. ssh do...
Hi Guys, I have a questions. I'm not sure whether the Firepower module of the ASA 5516-X can connect to any of the LAN ports instead of using the management interface. Do you think it is possible to do that? Thanks for your response. Kind Regard,Mich...
I just recently install Firepower module into my pair of HA Cisco ASA 5525-X. In my secondary firewall (it was my active firewall yesterday), I was able to access Firepower configuration Tab yesterday but today the tab is missing. I can only see "...
Hi, We will be having a migration from Cisco Asa 5515-X to ASA 5516-X with Firepower. We have some discussion regarding the firepower, as the Firewall is the internet firewall they don't want to use the management port to be connected to their netwo...
Hello,I plan to do demo with topology below: I used evaluation license for this demo(90 days).When FTD run in standalone mode(locally management) => everything is OK, it can do route to forwarding packet, detect macilious request and download malware...
Hi,How can I block RDP Brute Force attacks with IPS signatures? In fortigate there is a specific signature for blocking rdp brute force attacks. Is there any signature in cisco firepower IPS?Thanks.
