Hello, Recently i just installed an ASA5508 for a client, They using D-link adsl Modem connected to the Cisco Router 4321 and then the router connected to my ASA on interface GE 1/3 for outside and my inside interface is connected to GE1/1 to Cisco C...
Forum Posts
Hi guys! I did configure site to site HQ and Branch and also branch traffic go to HQ include internet.. and HQ have a firepower and use it for HQ so i wonder Can HQ ASA5525 firepower control branch traffic ? URL,, application.. ? without ...
I have several devices that use round robin hard coded NTP servers that I need to accommodate on a network segment. These devices do not behave correctly unless they can sync to an NTP server. Since they are not using authenticated NTP, I'd like to...
What license do I need to purchase to download Cisco Firepower User Agent?
HelloWe 're going to buy fpr9k-sm56-ftd-bun appliance and we want to install FTD image on it (not ASA image). We could configure it with the ASA image mode, but we couldn't find any option to select FTD image mode in the cisco build and price website...
Hi All,On our ASA we have two Site-2-Site tunnels configured (and working). How would i/we be able to let traffic from Customer A flow to Customer B through the 2 existing tunnels. If crypto maps or anything need to be changed at the customer ends, t...
Resolved! Cisco ASA kills idle sessions
Hi everyone, I just got in a strange situation here. I've got an ASA 5516-x with Software Version 9.9(2)36. We have some services which are connecting from DMZ site to LAN site via 1521 (sqlnet) to an oracle database. Sometimes when there is no traf...
Hi Guy's!I have an issue I need some help with. In the log files we keep getting Deny tcp src outside: when this happens we are unable to receive some emails. I have attached a screen shot. Any help would be appreciated! Thank you! %ASA-4-106023...
Resolved! Cisco ASA 5515-X reimage to FTD 6.x
hi,i have an ASA 5515-X with SSD and would re-image it to FTD.i don't see any star/TAC recommended badge on either 6.3 or 6.4, i only saw a star in patch 6.2.3.13.does this mean i download and upgrade using these files (6.2.3):ftd-6.2.3-83.pkgftd-boo...
I am in the middle of editing a few long ACLs that were created before my time. What I noticed is that when they were orginially created each line was created in intervals of 1. I know that I can copy the ACL out modify each line to be in intervals o...
I need help please! We have an ASA firewall with multiple VLAN's configured. It is an old environment where we have servers configured with multiple NIC's with different IP addresses all in different subnets. We have a desktop VLAN, on the same ASA, ...
I was running a TraceRoute to a remote server that goes through our new ASA5516x Firewalls, via a Private link to our Partner site, I know it is at least 5 hops in to reach this server, as we just migrated from our older 55xx EOL Firewalls, and could...
Hi Community Members, I am new to Networking and have a question, that appears difficult to me but to experts like you, it can be an easy one Our LAN Subnet: 192.168.171.0/24Our VPN Subnet: 10.251.251.0/24 Our client has allowed our LAN subnet (192.1...
Hello,I actually reimed a cisco firepower 2100 in asa.The problem is that when I go to create the port channels I can do it without problems but I can't associate the ethernet with the channel-group x mode active command because it answers me that th...
Resolved! ASAs and more-specific static routes
I had a situation with an ASA 5525-X running 9.6(4)25. There was a static route in place for (say) 10.1.1.0/24 out of one interface, e.g.route intf-1 10.1.1.0 255.255.255.0 <next-hop> A more-specific route was then required out of another interface e...
