So as the title states I am simply trying to open ports to the firewall for the purposes of VPN connectivity and copying the NAT/ACL rules seems to have no effect. I have changed the particulars for the ports but yet the newly copied rules and statem...
Forum Posts
Resolved! ASA multiple dns server groups not work
Hello!I make multiple dns server groups for ASA5525 asa991-smp-k8.bin like this: dns domain-lookup outside dns domain-lookup inside ! dns server-group DefaultDNS name-server 192.168.1.1 name-server 192.168.1.2 domain-name dns1.com ! dns server-group...
Hello, I have a FTD version 6.2.3.13 and an ACP containing 1000's of rules and hundred of zones.I want to block an application such as facebook for the entire environment. If I create a rule at the top of the ACP policy and set the zone and network a...
Resolved! 2100 HA support in FDM
Is there a way to configure High Availability with another 2100 in FirePOWER Device Management? I know how to do it in FMC, but for this client it has to be on box. Both devices have two interfaces linking each other.I cannot find anything in the GUI...
Hi Guys, Getting the event backlog has increased message with a really large amount of MB attached to the message. Raise a tac case or is there a known bug?
Hi, we're having a problem with out ASA5506. The public interface "outsideSub" has internet connection via PPPoE.The ping test to a public DNS server from the outsideSub iface is successful. However, the package trace shows that TCP packets are block...
My FMC is configured with Active Directory as Identity Source. I have a rule that blocks websites categorized as Gambling for AD user group "RestrictedUsers". Now, I want to change my Identity Source from AD to ISE and retain the existing Rule i.e., ...
Say the interesting traffic is ANY source on the ASA where you have IPSEC tunnels built. If I ping a destination IP which is deemed interesting traffic, what is a good way confirm the traffic is taking the IPSEC tunnel?
Resolved! Removing Network Objects
I'm trying to remove multiple network objects in an ASA running 9.1(3), but first I have to remove the NAT relationships connected to them. When removing the NAT rules, I am still not able to remove the object itself. To enter config mode for the ob...
Hello All, I was checking to see if below command I can configure at FirePower 8370 Stack. But once I login to one of the 8370 stack member ( 8350 ) , i am not able to find this command available. Also how can I see this preserve-connection is enabl...
Resolved! Ping FTD outside interface from inside
Even when all traffic is allowed I've noticed that I can't ping FTD interfaces except the "nearest" interface (traffic doesn't cross FTD).Is it possible to allow this traffic?
I am having a wired issue, I am trying to put my DMZ VM to outside do 1:1 NAT. It can not hit the NAT rule. For internal, the server is working fine. I disable the firewall of VM already.for the external, I put myself computer on the public IP addre...
Hi!,I configured the access to my web server inside from the outside, but in spite of doing NAT the ACL seems no to be apply on outisde, when I put the IP public on browser from internet , I see how browser change public IP to private webserver IP bu...
If I have the below, hosts trying to reach this subnet from Outside are automatically untranslated correct?:object network Natted_Hostssubnet 200.10.10.0 255.255.255.0nat (any,outside) dynamic interface
Hello to everyone I have a FTD 2110 and when after restore a backup either with FMC or SCP Server .FTD mark as offline in FMC .when ssh to FTD all of configuration is restored and that is OK .I cannot find any solution for this problem
