Hello, Can someone shed some light on the following questions please? 1. What is the scope of show conn table? a. all connections through the ASA b. from lower security level to higher security level c. from higher security level to low...
Forum Posts
Dear Team, I have a strange problem with VPN site to site ASA one way the VPN is up with transmit and receive traffic showing the other way the VPN is up with transmit only I tried to recreate the tunnel on both sides but still the same the proble...
Ok, this is my first venture to the cisco boards to ask a question. I have an issue where I have 2 subinterfaces on an ASA with the same security level (100) and same-security-traffic permit inter-interface, same-security-traffic permit intra-inter...
Dear reader/s, I have been asked to investigate the attached. This seems like a http flood attack to me. Please correct me if i am wrong. I have enabled http inspect on the ASA under default global_policy. Can you please suggest...
Hi Team, We have 1 sensor , it’s interface is down from long time. Though we can access the device since Ethernet cable is connected however we can’t see link on any interfaces. We have tried all possible things (swapping cable, swapping interface po...
I am getting below error in FP9300 chassis while trying to connect to smart software satellite server.We have locally installed satellite server.Generated a new token and import in FP9300.Also changed call home link to https://ip address:8443/Transp...
Resolved! Firepower DMZ ACP
Hello, I recently made a deployment and created only Inside--->Outside Access rules with file and intrusion policies. My question is should I also create Outside--->DMZ rules with IPS to prevent inbound attack?
Is this right: According to the attached figure, there is no Network Discovery performed with a rule set for Monitor, even if the Network Discovery Policy included the subnet of the workstation involved in the connection? Thanks.
Resolved! Single Public IP on ASA Firewal
hi all, i just need a quick confirmation. i got a site that will use ASA 5525-X to PAT internal users to internet and establish a site-to-site IPSec VPN to HQ using a single public IP address on the WAN/outside interface. i usually get a /30 public W...
Hi All, I have nearly hundred of Static NAT mapping need to migrate to FTD (FMC). Because those NAT are one to one mapping, i have to create hundred of NAT rule in FMC? It's not difficult in ASA, but for FMC, I have to create hundred of objects and r...
Resolved! Connection events in FMC to view by Rule
Hi All, Is there a way to filter connections in FMC (Analysis > Connection > Events) so that you can view traffic/connection events per rule or ACL? Thanks, Shams
This is my first Cisco setup. Local workstations get ip address but cannot get out to the internet. Can someone look over my running config? Building configuration... Current configuration : 4318 bytes ! ! Last configuration change at 12:29:28 Ch...
Hi I have some trouble creating a "trunk" on the ASA5506-x-w. On the old 5505 easy switchport trunk etc.. but on the 5506 with sub-interfacec, i have a hard time to get my setup working, (simple setup)and is a bit embarrassed that i have to ask for ...
Resolved! USB on ASA5585-X
Hi, folks.I know Cisco ASA5585-X support external USB as disk1, I have one ASA 5585-X SSP-40 running 9.1 but somehow it cannot recognize 8G FAT32 USB as disk1. Do I miss anything? thanks.Leo
NOTE: IP and other information posted has been changed from actual config... I have a firewall where ASDM put in the following statement when somebody was setting up/configuring the firewall. asdm location 192.168.0.0 255.255.255.0 outside Howe...
