We have an HA pair of ASA-5525x firewalls. Occasionally when we will deploy changes the SFR that is the standby mode will not update and the only way we have been able to correct this problem is to do a complete rebuild of the SFR module. We have tri...
Why is Pixabay.com blocked and marked as High Risk?https://www.cisco.com/c/en/us/td/docs/security/firepower/Application_Detectors/vdb_307/cisco_firepower_application_detector_reference_307/applications_p.html#wp3251917744It is used for stock images f...
Hello, On ASA Version 9.9(1)2, I'm trying to look at received-routes from BGP neighbor, but get this error: % Inbound soft reconfiguration not enabled on x.x.x.x. I can't see any commands in BGP to add the soft reconfiguration like we can in IOS. D...
We are behind in upgrading from version 5.4.X to Version 6.X. We currently have a FMC and sensor at version 6.4.0.1. Doing a side-by-side comparison from version 5.4.x, we see big differences in event generated. The sensors both monitor data from ...
I recently modified our Cisco ASA 5516-X firewall (in routed mode), changing the "inside" interface from one of the GigabitEthernets to a BVI (IP 10.0.0.1). After doing so, I seem to have lost access to our Windows (DC) Domain Controller (IP 10.1.1....
I am in urgent need of finding a copy of the PIX to ASA migration tool. Does anyone happen to have or know where I can get a copy? It is no longer available on the Cisco download site. Thanks! -JP
In understand order of operations are different. Let's say I wanted natted_host to reach ANY destination and ANY destination to reach natted_host which is on Inside interface. My ACL will still reference natted_hosts since they are being natted to ou...
Hello.i have config on asa 5525-x v9.10.2 and before it. Config working fine.1) nat (internet,dmz) source static any any destination static x.x.x.x 10.200.5.1 service https https no-proxy-arp2) nat (inside,dmz) source static any any destination stati...
Hi Guys, I was trying to learn the Infoblox from the you-tube videos but it's a hard time for me to understand the actual Infoblox. Could you please provide me the docs or any similar links so that I can learn the Infoblox in easy way. I would appre...
Hi,I have two DMZ on an ASA running 9.9 which use separate public IP to the LAN, and this all works fine, traffic from DMZ2 (10.3.3.0/24) is NAT'd to 1.1.1.4 etc - see attached diagram. What I'm having problems with is I now need to forward inbound t...
Hi. I have virtual FTD 6.2.3 and I can't to deploy RA VPN - "Login error". In trubelshoting section of VPN in Firepower MC i have this message: AAA Marking LDAP server 172.20.10.100 in aaa-server group 172.20.10.100 as ACTIVE AAA Marking LDAP server...
Hi Everyone, Need to confirm below config is good for Dynamic NAT on 8.2 nat (outside) 1 access-list Security outsideaccess-list Security extended permit ip object-group Outside object-group Test logobject-group network Outsidenetwork-object host 192...
Hi there, I would like to configure syslog, so I get only Allow and Deny from the ACL. I tried to configure an Event List with some Message ID's. But the logging seemed not to be the selected ID's, but * a lot * more. Any pointers? regards Nikolaj
Which circumstatnces are best to choose the Backplane option when configuring Packet-Captures in the ASDM?
I know it's a very trite subject but I'm already going crazy with this issueI am configuring a port mapping 53429 --->https, but this does not work.httpstopology: User browser PC port 53429 --->Outside ASA ---> inside ASA ---- Device DVR-app https ...
