Hi, I have 2 firepower 2130. When I connect to my Smart Account I can see I have 2 standard licenses activated. My 2 firepower are well registered. I have a problem when I try to configure the HA (active/standby). If I connect to the ASDM or when I d...
Forum Posts
Resolved! ASA 5516 Speedtest
Hi Guys, Our internet is slow and we would like to do a speedtest on our ASA5516 firewall outside interface. Let's say our outside interface maximum speed is 1gb, is it possible to get a percentage of the usage in speed preferably in both CLI and ASD...
Hi Everyone, I have scenario where ISP has provided two Public IP Pool i.e. WAN Public IP Pool: 103.XX.XX.4/30 LAN Public Pool: 103.XX.XX.128/28 I have Firewall which is connected with the ILL link (Physical). Requirement: WAN Public IP Poo...
Hello World, I'll jump straight to it: When I navigate to the ASA Access Rules tab in ASDM, I am simply overwhelmed by the large number of interfaces and ACLs that we have ... namely, because I am in a enterprise environment. To really learn the la...
In Firepower I have an Access policy that blocks VPN Clients. There are about 50 VPN clients that cisco has labeled. Anyway I had a user group that accesses a third-party website that uses Duo Mobility. Cisco firepower sees this a "VPN" and bloc...
Hi, Is it possible to allow return traffic in on an ASA when the source ip address is from the same ip range like the server you want to contact? So… the ASA has an IP range on the external interface and all the clients get a specific ip address fr...
Resolved! Taking out Any Any hitting loggs
Hi All, I have deployed Cisco 2100 series ASA with multi context mode and it contains any any rule in some contexts. So I need to take out all the traffic loggs which hitting any any rule. Any idea of taking loggs for each any any rule. ? I need...
hi, i'm going to configure a multiple context FW on a new ASA5525-X. i saw previous setup with and without the 'mac-address auto' command under the system context. my question is, is the command required or optional? if not enabled, will this cause '...
Resolved! ASA ipsec-vpn troubleshoot
Hello everyone, We built a ipsec-vpn tunnel between siteA(10.234.0.0/16) and siteB(10.176.0.0/16)the tunnel is up now ,but siteA's subnet can't ping siteB's subnet Here are the packet-tracer output:ciscoasa# packet-tracer input inside_1 icmp 10.234.1...
I have some questions from my customer, Could you help on it? I wrote some responses but I need to check if there is more accurate responses We did the PoC by FTD2110 v6.2.3 1- if 2 user edit the config then deploy done by one the second admin stil...
So when attempting to access a site or web page never loads. The site address is Pingable. Sometimes I may get that "Site not secure error do I wish to proceed" I click yes but then nothing just a blank page. I have attached the Wireshark screenshot...
Resolved! Problem with Active/Standby Failover
Hello alli using ASAv (ovf ) into Vmware workstation for practicing ASA , i think my problem cause because of ASAv i review so many times but i can't simulate in Gns3 i prefer to ask does it really happen due to using ASAv or there is other problem...
Dears FTD datasheet doesn't provide much detail of the below can anybody provide me this information for these FTD 2140, 4110, 4120 Firewalling throughput The firewall throughput without AVC only firewallingWhen SSL inspection is enabled than what i...
Greetings All - I have a bit of a dilemma right now. We just purchased a pair of Firepower 2120 Firewalls. These devices turned out to be rocket science. All documentation just jumps into configuration using FMC. My first question was: What is this F...
Hi, I noticed that when I setup the SFR module for FirePower, I get the option to configure and ipv4 address on the management interface, my question is can I choose a different interface, can I use another unused physical port on the firewall?
