Trying to configure a BVI interface on a 2120 FTD that is managed via FMC. I'm running 6.3.0.1. When I go to Device Management > Interfaces and select the Add Interfaces drop down, I don't get the option for Bridge Group Interface. I just see +Sub I...
Forum Posts
Hello All CSMs GeoIP Database wasn't updated since last year: https://software.cisco.com/download/home/286321073/type/284963388/release/2018.12.26 Also when checking under Tools -> IP Intelligence Settings there is no update since a while. The ma...
Hello guys,We have upgraded the asa software from version 7.x to version 9.1(7)32. After the upgrade, client laptop using Cisco vpn client 5.0.07 can't not use vpn. This vpn client version worked well when the ASA running software version 7.x So ple...
Resolved! FirePower License
Hi, AllI have ASA 5525 with SFR and firepower, the license expired and I cannot renew it at this time, my question can I skip the policy rules in firepower and allow users to access some websites blocked by the access rule and can I give the manageme...
MY-4506#traceroute 10.196.208.51Type escape sequence to abort.Tracing the route to 10.196.208.51VRF info: (vrf in name/id, vrf out name/id)1 192.168.173.1 0 msec 4 msec 0 msec2 10.196.208.51 116 msec 120 msec 116 msec3 10.196.208.51 116 msec 120 msec...
Hi, I've been struggling with an Active Authentication lab environment in my ASA FirePOWER version 6.2.2. I want to have a custom page so that anyone who wants to connect must enter credentials (if existing in my Active Directory server) or specify h...
Please I need your help and clarifications on some features on the new Cisco firepower management center. we recently got these new NGFW but I discovered after analyzing running configuration with Nipper Studio, I discovered some configurations are...
Resolved! NAT Config
Hi,I have a router which I have inherited with a network. Need to add a port forward to forward traffic on the Dialler0 port tcp/443 to the internal IP 10.20.24.49 on tcp/443. I have tried adding a static NAT statement: ip nat inside source static t...
Hi guys and girls,I have a pretty simple question: is there a way to see which DH-group and/or ISAKMP policy was used in a IPsec VPN tunnel?I know that you can see which encryption and hashing was used with "show crypto isakmp sa", but i was wonderin...
Hi all, Using FMC, I have configured 2x internal sub interfaces (1/14.100 and 1/14.200 which cover subnets 192.168.1.0/24 and 192.168.2.0/24 respectively) and tie them to internal zone. I have also configured an external interface 1/1 (connected to m...
Is it possible to detect and block based on host OS? I'm specifically wanting to block any Win XP and anything less than Win 2008 real 2.
Hi Expert, Customer has below query: Does Fail-to-wire (FTW) interfaces come into picture when NGIPS is freeze or becomes un-responsive(hang). As per me, FTW should act when NGIPS is freeze. Kindly confirm my understanding.
Hi,I need some help, I cannot find the answer for this anywhere.I try to setup NAT rule in ASDM but when I click apply I get Error xlate no more than two interfaces permitted. I also get this error when I do show xlate interface ..... . I dont know w...
Resolved! vpn filter
Hello,When clients over anyconnect try to access services via ASA, do they use the vpnfilter first or is it the ACL on interfaces that apply first?I am confused between vpnfilter & interface ACL , both are present in our case. Appreciate all help.
Hi I am trying to use eigrp on the cisco asa, simple setup (see diagram below) the link between sw1 and sw2 is just trunk (allow all the vlans)the link between sw2 and ASA is a layer3 link 2 svi created on sw1 =======================================...
