Hello, dear All!I have problem with icmp traceroute configuration. When I enabling icmp error inspection in global policy, my traceroute results through ASA 8.2.4 looks like this: ...
Forum Posts
I have a cisco ASA cluster for remote VPN connections(Anyconnect) . As seen below, when you use show vpn-sessiondb, you can see there is only 1 IPSec tunnel, used to monitor the VPN load-balancing cluster status. Our reporting tool (Cacti) , sometim...
I have 1 Firepower Management Center Virtual Appliance version 6.3.0.1. I need to add 6 FPR2120's running FTD to the Firepower Management Center Virtual Appliance. What would be the correct license to purchase. All FPR2120's have Smartnet 24x7x4 I ha...
So I have a basic lab setup - see attached. My outside host machine is able to ping my internal host when icmp is not enable on the ACL on Outside. Anyone know why this may be or is the case? ASA# sh run: Saved:: Serial Number: JMX184940D6: Hardw...
Hello,I currently have an ASA Firewall under my office Network that is being configured. Our network has a public IP address: 46.198.141.94 with 46.198.141.93 as its gateway. Our ISP is also giving us a free /29 block ( 77.69.37.56/29 ) that we need...
As I begin to work more with the FTD/Sourcefire and FMC combination I really being to miss the ability to tie rules to just an interface and not have to think about order of operation when placing rules. I have mandatory and default, I always put my ...
Hello, Everyone, I have an ASA 5525x w/IPS module which I need to migrate to FTD.I used a Firepower Performance Estimator https://ngfwpe.cisco.com/dashboard Right now ASA 5525x consumes 50-60% of cpu. Conditions:Traffic: ~200 Mbps Enabled Features...
Hi, Does anyone know when CSM version 4.19 is planned to be released? It looks like that we are hitting the following bug but on 4.18 not 4.16: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvk08347/?rfs=iqvred ASA version is 9.10, so we need a...
Hi,We've installed a virtualized FMC 6.3.0.This VM is on lab environment just for test, without any device managed, Internet access or any license added. Now, 6.3.0.2-67 patch, Snort Rule update and Vulnerability And Fingerprint Database have been up...
Hello Experts Do we have support for QoS marking/scheduling/policing and multiple context in FP9300 FTD image? Anything in roadmap? Regards, Sumanta.
During the initial set up of the ASAv in Azure, I created the virtual machine, all the IP Addresses, etc. After setting up (what I thought was the correct way to do so), I cannot get the initial ASDM web page to load. It's an odd thing. Let me exp...
Resolved! ASA State Table
I had a question about the ASA's state table. I may be overthinking this!When going from a higher security level to a lower security level, the ASA keeps track of the state of the connections, which you can see by 'show conn'.However, whenever you po...
Resolved! Routing issues on Cisco ASA 5510
Hi I was wondering if someone could give me some assistance. I have been having some routing issues on the Cisco ASA. Firstly, this seemed to be an issue with inter-vlan routing which was causing some issues, and after some reading etc. I think that...
Hello Cisco Team, Can anyboby done Application based Rate limiting in Cisco Firepower.As far as i know it is supported in Firepower 2100.But my Concern is do i need to install SSL in all my end point machines.if so then it is practically not possible...
Hi All.. ive setup with my 3rd party bank using NAT.for example.. if i want to hit their server, i would need SNAT from my side.if they want to hit my server, i would set for DNAT from my side. how about i want to hit their server and get hit by thei...
