When uploading a new identity certificate you are required to upload the intermediate signing certificate as well. My question is since the CA is contained within the identity certificate why is it necessary to upload the CA independently as well? I ...
Forum Posts
Hi Im tryiong to build a proof of concept for migrating our ASA firewalls to Firepower I've installed the Firepower Migration Tool, but when I connect to the FMC it says "0 FTDs found", even though I have an FTD added to my FMC Any help greatly...
Hi All We have a Firepower Management Centre 2000 appliance (i.e. FS2000-K9) running 6.1.0.3 (build 57) software. Currently we have the FMC appliance managed via it's eth0 interface i.e. physical NIC "1". We have a request for the FMC appliance to be...
Hello experts, FTD 6.3 is finally here, not as feature rich as I would have hoped for, but I hope that it is a stable release at last I have a couple of questions on the new Multi-instance capability of the FTD 6.31- are we running different NFGWv i...
Hi,I have an ASA and my syslog server keeps saying a VPN is failing as there is no match!I have setup many before but this just won't connect. How do I few more detailed crypto logs?Any commands what be most welcome.Thanks
Hello folks, I have this scenario; I have 1 FMC already integrated with the Active Directory (FirePOWER User Agent) and is working fine. Now we deployed a second FMC but, the users are using the same AD for web authentication. My questions are;...
Need to enable some more security to a clients network. Can a set of Iist of allowed IP addresses for VPN remote access? Thanks
Resolved! Generate Crypto Key for SSH on ASA
HiI have access to a couple of ASA firewalls with only ASDM access to all. I have tried to SSH to them but unable to do so despite having the correct configuration, None of the firewalls currently have a crypto key generated (i used "show crypto key ...
hiI'm trying to import server certifacate issued by our corporate CA to FMC, but i always get error "Unable to verify certificate."In /var/log/httpd/httpsd_error_log i see errors: [Thu Nov 09 08:59:37.040550 2017] [cgi:error] [pid 27221] [client 10.1...
Hi, I have a ASA 5506 (Site A) in which I have multiple tunnels set up. One of those tunnels have the same IP Range as ASA5506 inside one. I set up the tunnel with a 10.4.10.193/26 (Site A) and the Site-to-Site Tunnel (Site B) is behind the 10.4.10.1...
hi, i'm wondering about if the ASA5506-K8 software includes the ANTI-SPAM service or i should add a license ?
Hello.I am using a pair of switches (SW1, SW2) for failover link between ASA nodes and for several data interfaces (C,D).Also I am using another pairs of switches (SW3,SW4 and SW5,SW6) for another data links on ASA nodes (inside,B). When I rebooted S...
Resolved! ASA uses crackable transforms
HiI have a PCI compliancy vulnerability that states"Your firewall/VPN system allows a crackable transform to be used. Transforms are a combination of encryption cipher, hashes, authentication types and mod key exchanges.This is used to support encryp...
Resolved! ASA Multicontext Licensing in Failover
Hello: I have two ASAs configured with Multicontext in failover (Active / Active), with the license for 10 Security Context in each device. When i apply a "Show Version" command, it shows: Failover cluster licensed features for this platform:Securi...
Good Day, So here's our configuration for the Cluster:cluster group ASA-Cluster local-unit ASA-2 cluster-interface GigabitEthernet1/8 ip 172.200.200.120 255.255.255.0 priority 50 console-replicate health-check holdtime 3 health-check data-interface a...
