Hello Community, I'm new with this environment, Firepower Threat Defense, so I'm going to explain my case.The company purchased a new Cisco ASA 5506-x with Threat Defense. I would like to know how can I start the configuration via ASA CLI, because wh...
Forum Posts
Hi helpful people, I have an issue that is confusing me and hoping someone can shed some light on the situation. I am receiving a number of log entries of the nature: Inbound TCP connection denied from 192.168.2.210/55187 to 192.168.2.200/7680 flags ...
Resolved! ASA 5508 9.6 public ip to dmz
ASA 5508 9.6 public ip to dmzhow config # sho runASA Version 9.6(1)!interface GigabitEthernet1/1nameif outsidesecurity-level 0ip address x.x.x.111 255.255.255.0!interface GigabitEthernet1/2nameif insidesecurity-level 100ip address 192.168.1.1 255.255...
Hi Experts, Could you please provide more insight on to below packet capture. What exactly happening between, 10.20.59.52 and 204.110.219.102 Also, suggest good docs/online links, which will help understand the TCPIP handshake and packet analysis. 9:...
Hi All I hope you can give me some feedback on what I am looking to design. I have a DC with multiple landing sites with dark fibre connections to each site. I need to VPN traffic back across these links encrypted and I''m looking to use 4110 NGFW. A...
Hello all, currently I'm troulbeshooting the following Topology: image 1 scenario: - All interface have access-list allowing the communication to every other IP range. - All the routes are known for each node. - The security-level of each interf...
Hello,i got ( free of charge ) my hands on cisco 887VAW whit advipserviceslicense installed permanentnow i setup the router for home use but i have a problem,how to port forward?i need to port forward port 50500 to lan host 10.0.1.100 im new to cisc...
We have configured in an Active/standby array of ASAs a route tracking service to some destinations, each destination has a main and a secondary link.Tracking service is not the issue, we found in our syslog server events from our active unit saying...
Hi, i have a cisco ASA 5516 and need to be able to have 2 internal subnet communicate with each other connected to 2 different interfaces GigabitEthernet 1/1 is the outside connectionGigabitEthernet 1/2 is the DMZ connectionGigabitEthernet 1/3 in th...
I have a Cisco ASA 5510. I created a new VLAN and when I VPN in and try to either RPD, PING this VLAN I can;t. I believe I see the issue but not sure how to fix it. When in the ADSM Configuration - Objects - Network Objects I see something that sa...
Firepower device manger on the box of the 4110 with FTD image can manage all the features of the firewall include firepower service ((IPS ,URL ,AMP)?
Hello,Sometimes (once a month) occurs issues related to tunnel between Cisco router (our side) and Adaptive Security Appliance (other company).Problem disappears if tunnel is initiated from Adaptive Security Appliance side.How to fix this problem?
Resolved! logging device-id ipaddress
Hi everyone,If we config ASA with command belowlogging host inside 192.168.1.50Above command will send all log messages to server 192.168.1.50 right?If we also config command belowlogging device-id ipaddress inside What does above command do?will it ...
Hi,I'm just playing around with a few ASA's and wondering what allows return HTTP traffic into the firewall? Also, what other traffic is allowed by default like HTTP?Traffic is originating from a higher security interface (inside, 100) to a lower sec...
I am interested in getting all of my Cisco routers and Switches (with IOS <= 12.2) to use Azure MFA for SSH login. I do not want to use ASA or ISE or anything else like that. I would like to just authenticate them against a RADIUS or TACACS+ server, ...
