Hi We have a FW with FTD 6.2.3.6 that is not connected to internet on MGMT interface. Since we drop the 90 days evaluation period, no it says unregistered and all new deploy of objects and policies can't be done Could you help? IS it possible...
Forum Posts
Hi, My current setup is that I have a 2960S switch which links to a 897VA on a trunk link, the 897VA is setup with 6 vlans for various networks. The 897VA is also setup with ADSL connection to Plusnet via the built in VDSL controller it is also setup...
Resolved! Remove FMC NTP 127.127.1.1
hi, i've added google NTP in FMCv but i can still see 127.127.1.1. see photo attached. is there any way to remove it or is this a system default?
Hi all. I'm trying to configure BGP over VPN L2L. The logs show that the source interface for BGP is the Outside interface and not the Inside. I was looking for a command like: neighbor NET update-source (inside). But as this command is only availabl...
Hello Everyone,I have installed an ASAv instance in AWS and am trying to bring up an IKEv2 L2L using certificate authentication. Phase I and II pass and the SA gets built up. I get traffic to pass but only briefly, exactly 1 min... Then it dies. I...
Hello guys, A client is asking me to implement a vpn site to site using main mode. But I have a Cisco ASA 5525 version 9.1(1) with its default value aggressive mode. I think that If I use the command "crypto ikev1 am-disable" in the global configur...
does anyone know if there is s a link to configuring l2l vpn with certification authorization?Im currently using PSK and moving to IKEv2 with cert auth. IKEv2 is working with PSK but i want to use certs
Hello all. I have made a few tests with content block and got stuck with an unexpected behavior - or a bad understanding from my part. 3D sensor runs v6.2.2.2-1, if that adds to the question. According to the documentation [1]: "The Block and Block...
Using this equipment in my home lab for study purposes.I attempted to follow instructions I have found to send the asa traffic to the ips module for inspection. I command is missing for me.Commands I input on the asa: access-list IPS extended permit...
Resolved! Doubt about OSPF Topology
Dear, I have a question regarding the attached OSPF topology. Here are some details about the topology: * The Neighbor OSPF 1 router can only learn the network route 1* The Neighbor OSPF 2 router can only learn the network route 2* The Neighbor OSPF ...
Configured a new ASA 5506-X for a client. It will connect to Cox Business when it is setup to pull an dynamic IP address on the outside interface. It will not connect to the static IP address that they have through Cox Business. It will not conn...
Hi AllThis maybe a bit of a strange request but I'm looking for the best way to create a link from one internal firewall to another internal firewall to pass specific traffic (Only ports and protocol for Mail). The only other traffic we have at prese...
Hello,I am configuring my company FMC security intelligence part. But in the available objects tab, I didn't see the Cisco feed objects as: Malware, Phishing, Bots, etc.Any one can help me? Thanks.
Resolved! Firepower IPS
Kindly ask you to help me.Well, we deployed IPS on firepower and created network analysis policy to block nmap scanner. When a computer begin scanning another computer firepower blocks it and generate event. It is ok. But yesterday i saw that TFTP tr...
Hi A client of mine has recently purchased two ASA 5516-X with Firepower devices and, not being very experienced with the product, I can't seem to get it to block simple threats. Details of one of the units is in the text below, but basically I don...
