Hi,We planned to configure QOS in our ASA. Decided to go for priority queue, but the problem is, asa is cofigured with subinterfaces. If i apply the command priority-queue physica interface name, then this will take care of subinterfaces configured u...
Forum Posts
Hi, how can i stop officially/regularly Cisco FMC 4500 backup process without any problem. It runs more than 12 hours, but does not do anything: Thanks
Hi , As per the enclosed topology we want to restrict ransomware or other kind of threat to spread across different office locations through MPLS links , what are the best solution for this kind of environment ? Vijay
Resolved! Firepower Updates
Hi All, Quick question regarding Recurring Rule Updates within FMC. If it tick the 'Deploy Updated Policies to targeted devices' does that mean that the update will be automatically deployed to my FTDs and the Snort Process restarted? Thanks
Resolved! Hairpin NAT ASA5506-X version 9.8
Hellow everyone! I'm trying to configure Hairpin NAT on my ASA5506X (version 9.8.2.20) in order to allow internal users connect to internal servers through their Public IP address 82.52.222.122 (fake).I used this scenario on my old Cisco PIX515E (ver...
This is my policy tableMy model is I configured on the FMC asa (Vmware) routing table network layer as pictured with the peplink device and at the same time configuring nat (i tried removing nat) but apparently the application like viber, outlook sti...
Resolved! ASA Default Route Configuration
I'm using an ASA 5506-X I decided to go with a static default route in my configuration I'm not connected yet to the internet, but I assume that is not necessary for configuration.My understanding is the default static route configuration on an ASA i...
I am connected a site-to-site VPN, with one old ASA version 7.8, and one new ASA, version 8.4.I am getting very confused about how the new nomenclature relates to the old.Is ikev1 the same as isakmp in the commands? Is ikev2 like the old IPSec comma...
My configuration:crypto ikev1 enable outsidecrypto ikev1 policy 2hash shaauthentication pre-sharegroup 24lifetime 3600encryption aes 256exitaccess-list 101 permit ip 192.168.2.0 255.255.255. 0 192.168.3.0 255.255.255.0 My problem arises when I try to...
Resolved! Event Manager on ASA 8.2
I'm trying to set up Event Manager on an ASA 5540 8.2, but it's not showing the commands, nor the initial command, does anyone know why? #event manager applet EventICMPdescription Monitoring Memory ProcessorCPU and Interface ICMP Incidentevent timer ...
Hello, We got a Cisco ASA5506-X with Firepower and all traffic is going through the firepower module. There are allot of Access Control Policies allowing and blocking sites. Now the problem is that the internet speed should be 100Mb but we are o...
Hello, I would like to know at which end the issue lies, In the attached wireshark traces, the ip address 10.92.55.255 sends SYN to 92.60.106.204 and the ip 92.60.106.204 replies with SYN ACK but then we don't see any ACK from 10.92.55.255. Can ...
Hi All I have the following topology Internet | Cisco ASA | Core Switch------------Router1----Backup Internet All my traffic goes out through Cisco ASA but I want only certain traffic (for example) telnet traffic to go through backu...
Hello, I currently have an ASA that has a default route out to a service provider (extranet with RFC1918 addresses plus some limited RIPE addresses). The network will be changing in the future and I need to swing that default route elsewhere. The...
Greetings, I am unable to ping from my wlc (built-in-wap) to my any of my firewall segments. I can get dhcp to work to assign me an ip from the range for my dhcpd but I can't get the connectivity to internet as it drops or says it should pass it i...
