Hi Expert, Customer is looking for Active/Active deployment for NGFW 4100. The solution is to use firewalls in cluster setup and make A/A by using Etherchannel load balancing scheme. Queries are: 1. Can it be deployed for two firewalls setup? 2. Wi...
Forum Posts
Dear ALL, I'm configuring the FTD with FMCv, I have a question for the FTD management port.FMCv Management Port IP:192.168.20.2/24, Gateway: 192.168.20.1FTD FW Management Port IP: 192.168.30.2/24,Gateway: 192.168.30.1FTD Inside Interface IP: VLAN10 :...
Hi all, i have a brand new ASA 5505 which wont let me access with either https or asdm. I tried from 2 different computers, with manual IP settings and DHCP from the ASA. I can ping the ASA and connect via terminal but not with https and asdm. ssh do...
Hi Guys, I have a questions. I'm not sure whether the Firepower module of the ASA 5516-X can connect to any of the LAN ports instead of using the management interface. Do you think it is possible to do that? Thanks for your response. Kind Regard,Mich...
I just recently install Firepower module into my pair of HA Cisco ASA 5525-X. In my secondary firewall (it was my active firewall yesterday), I was able to access Firepower configuration Tab yesterday but today the tab is missing. I can only see "...
Hi, We will be having a migration from Cisco Asa 5515-X to ASA 5516-X with Firepower. We have some discussion regarding the firepower, as the Firewall is the internet firewall they don't want to use the management port to be connected to their netwo...
Hello,I plan to do demo with topology below: I used evaluation license for this demo(90 days).When FTD run in standalone mode(locally management) => everything is OK, it can do route to forwarding packet, detect macilious request and download malware...
Hi,How can I block RDP Brute Force attacks with IPS signatures? In fortigate there is a specific signature for blocking rdp brute force attacks. Is there any signature in cisco firepower IPS?Thanks.
Resolved! VPN client to ASA 5508 9.6
how connect asa 5508 through VPN clentconfiguration asa 5508 9.6
Hi to all,on the basis of a re-certification I am dealing with the NAT topic more intensively the last few days and I`d like to ask the following question. I want to implement the following static PAT for Telnet Access from external to Outside-IP: 2...
Hello,We are planning to implement a second LAN using a Netgear wi-fi router; Our current LAN is using a Netgear Nighthawk as the primary router which is directly connected to the ISP router and to a Cisco switch to provide DHCP service, wi-fi, and E...
Hi AllWe have a working ASA with some VPNs IPSec up & running, now we configured a new one but it doesn't reach phase 2, this is the debug message: IKE MM Initiator FSM error history (struct &0x00007f6e86ee17c0) <state>, <event>: MM_DONE, EV_ERROR--...
when i connect to my primary asa VIA SSH / CLI is it possible to switch the failover unit?i want to run "sh inventory" on the fail over unit. How would i do that if i don't have CONSOLE access to the fail over unit.
Hello All,Please ignore my ignorance as I tried to wrap my head around this question lingering in my mind.This is more of a query on how the Cisco firewall handles return traffic when an 'any any' policy is in place. The traffic is originating from a...
I have inherited a very old and very ugly ASA firewall policy. I'm more of a Checkpoint firewall engineer but do have some basic Cisco knowledge and have been muddling through on the CLI as best I can until we can get this site to our corporate stan...
