Hello. I have a scenario that 2 Distribution Switches (DS1 and DS2), then 2 Filtering Devices in transparent mode and then 2 ASA Firewalls in active-standby mode connected in the following way.DS1--> FD1 -->ASA1 DS2--> FD2 -->ASA2How can we configure...
Forum Posts
Looking at the below - (This could be any addressing and assume all ACLs are in place etc.. for the traffic flow) interface Gi0/1nameif WANsecurity-level 100ip address 10.99.0.1 255.255.255.0 interface Gi0/1nameif DMZsecurity-level 50ip address 192.1...
Resolved! FTD on ASA Factory reset
I am testing out a FTD conversion from ASA on a 5516-X. I have FTD version 6.3.0 loaded and working. I want to factory reset FTD and start from scratch with my config. is there an easy way to do this in the FTD software? i don't want to re-image it i...
HI,Asa crashinfo show like below , does it mean it crashed on may 15 th 2015 or in Apr ? saved crash shows on Fri Apr 19 2019 , is it crashed on Fri Apr 2019 ? (Saved crash: 13:09:10.000 IST Fri Apr 19 2019) Thanks Compiled on Thu 17-May-15 09...
Resolved! EICAR ON SMB NOT WORK
Dear ALL, I'm using the FTDv with FMC management, i 'm testing the malware & File feature. In my test, i try to copy the EICAR file(eicar_com.zip) from user zone to server zone, the file is copied, but I check the FMC connection event, the log show ...
Hi,What is the difference between "failover active" and "failover exec mate failover active".How to run the failover exec mate command Thanks
Hi,I am getting the scanning drop rate-1 exceeded,current burst rate is 3 per second max configured rate is 10 ,max configured rate is 5 ,cumulative total ccount is 4387 .The message is coming approximately every minute show threat-detection rate...
I hope someone on here can perhaps help me. We have a fleet of ASA-5506-X models in the field that I am in the process of replacing with new ones due to the Cisco clock chip vulnerability. We have SFR enabled and we use REST. We actually use REST,...
Hello Experts, Can you please share a way to configure Site to site VPN configuration using FMC Rest API ?I tried using Api explorer but I do not see how to add, node, and all other parameters. Thanks in advance.
Hello Team,Please help me.I am failling to install Certificate Using SCEP enrollment via FMC on FTD.The window CA server is directly connected to the Firewall.but the enrollement status is failled.Do I miss some thing.Please Hep me.Attached is the fi...
I have a Cisco virtual FMC 6.2.3.12 that keeps disconnecting to NTP server. It got associated to NTP server for a few hours and disconnected thereafter repeatedly. It keeps switching between local ntp 127.127.1.1 and my ntp server x.x.x.x. Any assis...
Good Morning - I'm looking to migrate a ASA 5505 running 7.2(4) to a FirePower 2110 NGFW. What would be the best course of action to do this? Thank You
Hello all, I am an amateur when it comes to the true science behind some of what I am trying to configure so I love to hear explanations as to why it is not working, as well as get it fixed. I have a Cisco 5540 running 9.1. I have an outside, p_wir...
Resolved! Disable inter-VLAN routing
I got an ASA 5506-X (9.8) with separate vlans behind it on an L2 cisco switch. The ASA is strictly only for providing Internet access with NAT. I want to make sure that there is no routing between the vlan subinterfaces, but still provide access to t...
What are the FirePOWER ASA models which can support Firepower Threat Defense Image upgrade? Following are the ASA FirePOWER models which can support Cisco Smart licensing ASA5506W ASA5506 ASA5506H ASA5508 ...
