Hello, I am having a problem with IPsec VPN on ASA5525. the issue is that even IPsec tunnel has been established, traffic from HQ (ASA5525) does not flow through ASA outside interface.It seems that traffic from branch(Meraki) can go through HQ ASA an...
Forum Posts
Hi, Bit of an architectural question. I am trying to understand the relationship between the FTD User Agent as deployed on a domain controller, and FMC in the context of of a single FMC deployment and that FMC failing. The documentation suggests th...
I am trying to set up an AnyConnect VPN. I am able to connect to the VPN, and I am pulling an IP from the pool. But I cannot ping the interface of the Inside network. This is a new firewall and the VPN is one of the first things I am configuring, ...
Hello,I run ping scans on certain subnets that may or may not be conneceted to ports on my ASA. I need to exclude my workstation IP address from being flagged as a threat. Anyone know how to do this?ThanksGene
Hello, I tried to configure ACL in Packet tracer and I've some trouble with it.Here is the lab: I tried to allow DNS from DATA to the DMZ, but it doesn't work, I must allow >1023 ports from DMZ in order to return an answer, why I can't do a acl est...
Hello, I am in search of helpful documentation or advice on how to view IDS specific logs on a Cisco ISA 3000. Currently we have a minimally configured firepower ISA 3000 device configured in our test environment and we are throwing several nmap scan...
Hi, Just wonder how should I backup the system configuration in ASA Multi-context mode? I know "wr mem all" will save configuration for all the contexts but what about the system? I can not find the configuration of system in flash. I had to manuall...
hi,on ASA, there are 3 contexts, is there a command to backup all configurations at the same time? for command copy run ftp, I have to switch to every context to issue it.Thanks,Jonathan
Hello, I would like to give more details on my problem. I have two buildings - B1 and B2. both building Connected through ISP P2P Fiber..WE are using HP Switch to make this connection. On B1 Switch there are a Route defined. ip route 172.16.8.0 25...
In one for Branch Office, we are experiencing high packet drop on ASA firewall.Below is the brief design.Internet link is connected to ASA directly on Outside interface, & LAN is connected to inside interface of ASA firewall. Will testing, packet cap...
Hi,We are using FTD and using its web management. We created a realm and anyconnect configuration is done. When I try to connect from anyconnect we get "login failed" error. How can we check which active directory OU group its checking? Which logs sh...
Hi,I have setup a ASA 5506-X in my office like this (pls see the commands below). In Setup Wizard, I use Anywhere Connect VPN to connect to office from home. Connection status shows success and I got an IP with correct Default gateway: 192.168.1.1. ...
I wanted to implement FirePOWER rules based on AD groups so I installed and configured the FirePOWER User Agent. But it seems like the dual stack network ruins this solution, the AD authentication that is picked up by the User Agent and sent to FireS...
I have a FTD 9300 already added to FMC.I need to change the device certificate but I am struggling to find in the documentation do I need to add the device certificate on the FTD 9300 first and re-add the device back to FMC or it can be done directly...
Dear all, Can someone advise what is the difference between ASR-Group Vs Traffic Zones?We have 2 ASA in active/active state.We are using one Security-Context that has 2 outside sub-interfaces each with a transport VLAN.on each sub-interface we have o...
