Hello Cisco My ASA is in Active/Standby and my Ftd boxes have to be in HA as well: 1)Is an FMC or FMCv mandatory to perform HA on FTD? 2)Do i need to configure HA on my FTD boxes before migrating the ASA Configuration? If not, Can the migrated ...
Forum Posts
I have an ASA 5520 that is currently running 9.1.. I am trying to implement WCCP to use with our proxy web filtering appliance (Forcepoint/Websense). I have setup everything exactly as described in the Cisco and FP/Websense documentation (ACL's, Serv...
Why do i see so many "Cloud Lookup Timeout" message. I am running FireAMP for Networks.
Hello, We have a Cisco ASA 5520. The ASA has been in place for about 4 yrs. We have about 15 Site to Site VPNs configured on it. These S2S vpn connections have been in place for a few years now. In the last month, we've had two instances where ...
Hello All, Cisco ISR4331/K9 Router, Cisco IOS XE Software, Version 03.16.04b.S - Extended Support ReleaseCisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 15.5(3)S4b, RELEASE SOFTWARE (fc1). The router is configured with Zon...
Hi, I have 2 firepower 2130. When I connect to my Smart Account I can see I have 2 standard licenses activated. My 2 firepower are well registered. I have a problem when I try to configure the HA (active/standby). If I connect to the ASDM or when I d...
Resolved! ASA 5516 Speedtest
Hi Guys, Our internet is slow and we would like to do a speedtest on our ASA5516 firewall outside interface. Let's say our outside interface maximum speed is 1gb, is it possible to get a percentage of the usage in speed preferably in both CLI and ASD...
Hi Everyone, I have scenario where ISP has provided two Public IP Pool i.e. WAN Public IP Pool: 103.XX.XX.4/30 LAN Public Pool: 103.XX.XX.128/28 I have Firewall which is connected with the ILL link (Physical). Requirement: WAN Public IP Po...
Hello World, I'll jump straight to it: When I navigate to the ASA Access Rules tab in ASDM, I am simply overwhelmed by the large number of interfaces and ACLs that we have ... namely, because I am in a enterprise environment. To really learn the la...
In Firepower I have an Access policy that blocks VPN Clients. There are about 50 VPN clients that cisco has labeled. Anyway I had a user group that accesses a third-party website that uses Duo Mobility. Cisco firepower sees this a "VPN" and bloc...
Hi, Is it possible to allow return traffic in on an ASA when the source ip address is from the same ip range like the server you want to contact? So… the ASA has an IP range on the external interface and all the clients get a specific ip address fr...
Resolved! Taking out Any Any hitting loggs
Hi All, I have deployed Cisco 2100 series ASA with multi context mode and it contains any any rule in some contexts. So I need to take out all the traffic loggs which hitting any any rule. Any idea of taking loggs for each any any rule. ? I need...
hi, i'm going to configure a multiple context FW on a new ASA5525-X. i saw previous setup with and without the 'mac-address auto' command under the system context. my question is, is the command required or optional? if not enabled, will this cause '...
Resolved! ASA ipsec-vpn troubleshoot
Hello everyone, We built a ipsec-vpn tunnel between siteA(10.234.0.0/16) and siteB(10.176.0.0/16)the tunnel is up now ,but siteA's subnet can't ping siteB's subnet Here are the packet-tracer output:ciscoasa# packet-tracer input inside_1 icmp 10.234.1...
I have some questions from my customer, Could you help on it? I wrote some responses but I need to check if there is more accurate responses We did the PoC by FTD2110 v6.2.3 1- if 2 user edit the config then deploy done by one the second admin stil...
