I have an ASA that I keep getting this error in the ASDM Syslog messages which I need to fix to troubleshoot a device. Severity 3 Syslog ID 313001 Denied ICMP type=8, code=0 from 10.21.1.100 on interface Work_interfaces I am a rule that permits ICMP...
Forum Posts
Resolved! ASA cluster IFC failure
Hi, Team we had an issue with the ASA failover the one should show standby , but it show failed State Last Failure Reason Date/TimeThis host - Secondary Active NoneOther host - Primary Failed Ifc Failure inside: Failed could you help to undertand ...
Hello, I’m not at all familiar with any of the intricacies in any way and really am just requesting a simple version answer for this please. I just want to know which asa image file I need to use and what adsm image to use in order for the firepower ...
I have a asa5500x-ssd120 SSD from an ASA5500-X that is opal locked. It is a micron drive. I saw some commands to revert revert or remove the psid for the 3100 Series if I'm not mistaken but those commands are only for that series. There are some raid...
Resolved! Cisco FPR 3105 Licensing
Dear Community,I have a pair of FPR 3105 devices which have been reimages to ASA & running as ASAs with traditional ACL services.I don't have applied the Basic STD licensee; it has expired now post 60days of trail period. I am getting the throughput ...
I have imported the PKCS12 file into objects > PKI > Cert enrollmentWhen adding the cert to the device it is stating CA not available.. is this because the CA Root and Sub CA's are also required to be added to the PKI cert enrollment section?This par...
Hi, i came across a problem and i would like your help.During test procedures i did a shutdown of the outside interface in FTD-1 which is in failover pair. Deliberately, i had no monitoring interfaces nor backup IPs in the secondary FTD-2 as i wante...
Resolved! Ikev2 Ipsec Between Asa and Sonicwall
Hi team, Need help in understanding an issue faced when creating a tunnel between Asa and Sonicwall (Issue got resolved) still need help to understand. SonicWall: Phase 1Ikev2Encryption aesAuthentication sha265Dh 14Lifetime 86400 Asa: phase 1Ikev2 En...
In my SSL/decryption policy advanced settings I have chosen the option to block unknown cipher suites and therefore in my connection logs I see lots of connections that are blocked due to unknown cipher suites, which is expected. However, the partic...
Hi All, I have a need to deploy an HA pair of ASAv in Azure. I've read the Deploy ASAv on Azure Cloud document and I understand that the ASAv is required to have interfaces in four subnets, not including the Azure GatewaySubnet. My Azure Virtual...
Hello, I have a firewall configured active/standy lan failover. Over the weekend there was something that happened and now the standby is active. Below i posted the failover state, for security purposes i just left out the actual ips on some. I know ...
Resolved! Firepower - Geoblocking countries
I geoblock traffic from most countries. I have run into a few websites that my clients need access to but are located in one of the blocked countries. Is there a way to allow these websites through AND continue to block other traffic from the count...
Hello guys,So as we deploy (add) the Cisco FTD and FMC in VMware Workstation with the .ovf file, the default disk size is very less and since we can thin provision, how can I increase this size to 2 TB.Also, once I upgrade my Cisco FTD or FMC, does t...
Resolved! Issue port-forwarding on Cisco ASA
Hello!We have a Cisco ASA running version 9.18.4.22 that we are trying to do port forwarding on. Right now an endpoint hits the outside interface ip and should forward the traffic to one of our servers that sits on the inside interface. I had set thi...
Hi,I have two questions on the behaviour of 3100 Secure firewalls in a cluster and interface health checks.We have a pair of 3100 secure firewalls (running FTD), that we have setup in a cluster, managed by FMC. All devices connected to the two FW's u...
