Hello community,sorry for my bad english,i want use function remove objects "Not Used" for cisco ASA 5515, but my team say it this can lead to bad consequences (nat, acl remove). I can not find to what exactly problems. Is there a risk?
Forum Posts
According to NAT section rule section 2 should be processed before section 3. In my test LAB the section 3 get processed. In other words Twice-NAT (after-auto) get processed. Expected is section 2 object NAT + PAT There are two rules 1) Object ...
Hi all,On of our customers added a new subnet on their side which we want to reach trough an already existing S2S tunnel. The new subnet the customer added is: 192.168.59.0/27.We're working with a pretty old ASA, with old ASA software 8.2(5)55 as wel...
Hello,I find that every 6-12 months I will log on to the ASDM and go to the Network Objects/Groups section and spend ages right clicking on each object and seeing if it is still being used and if it isn't I then delete it. It can take a long time as...
Resolved! FMC Question
Hi, I've installed my firepower from ftd management (locally) and it is working now. What happens if I add this FTD to the FMC? Is the configuration is lost or the configuration is fetched from ftd to the fmc? Thanks.
I have a customer currently running 6.2.2 FirePower code managed via FMC. They have 2 separate circuits from the same ISP with different ranges and want Circuit1 connected to Primary and Circuit2 to Secondary so that, should a failover happen, they...
I have 3 ASA 55xx-X devices which are running ASA 9.9(2) code and FP code v6.2.3.11 All devices have Protect and Control license. When they are connected to Virtual FirePower MC they are listed as unlicensed. They were properly licensed before connec...
Resolved! NGFWv deployment in Azure
I'm deploying NGFWv appliance in Azure. Since the license model in Azure is BYOL, what specific licenses or PAKs do I need to buy to utilize this appliance in Azure. I couldn't find detailed information online. Thank you.
Hello Community, I have a ASA with a local VPN Pool where the VPN users get their IP-address. Is it possible to advertise this network in the bgp process? Thanks and regards,Philipp
Hi, From our Firewall PALO ALTO, I try to get informations from ISE SNMP logs in order to identify users connected to ISE, to give them access to ressources.... I need to be able to link Username and IP address... Then, I get info from this log : (...
we can not run or launch asdm on asa 5506-x
Hi, I am trying a very simple CA set up as below R4 Fa3/0--------------Fa0/0 R2 AKA CA SERVER Below is the debug o/p from R2 while executing the command "crypto CA authenticate <trustpoint-name>" in R4 May 18 11:23:14.383: CRYPTO_CS: received a...
Hi All, I am getting below error while trying to enroll certificate from CA server. "ERROR signature public key not found - abort " My CA server is Windows 2008 server & i have configured trust point in Cisco ASA firewall. I am able to authentica...
Kindly, I want to block a particular site, example: 1- you-tube.com (it is a domain, but I do not want to block all you-tube domain) 2- https://www.youtube.com/watch?v=3oRSzE5RIuc( I need to block only the part of this site not all domain) How ...
Resolved! cisco sourcefire device
Hi all,i would like to know how a cisco sourcefire device fetches the syslog itself to another syslog server?thanks
