We recently noticed a sharp increase of brute-force activity against our Cisco 5555X Firewall, which provides our remote access VPN.I inherited this firewall, so I want to ensure we are taking advantage of all available options to harden the ASA.I se...
Forum Posts
I tried migrating our 5555-X to a 3120 instance HA pair. For the most part, it migrated, however only ONE WAY. Our firewall is set up with inbound AND outbound ACLs and only the inbound ACL's migrated, leaving a huge load of unmigrated network object...
We have two internet providers. Trying to route all outbound Internet traffic to the second ISP but PBR is not working after applying the configuration on FP1140.After enabling the route map the device matches to the correct next ip hop as configured...
Hi All,Can somebody tell me if it’s possible to use MDNS routing for Airplay discovery. The firepower is an FPR1010 running FTD firmware. kind regards,patrick
Hi,We have a FPR-1010 with the FTD code 6.6.x code and also being managed by FDM and not FMC which has high memory since day one.I noticed since these FPRs should have 8 GB of memory but when i type show memory or show version it only shows close to ...
Hi all,I have had a failed migration attempt due to VDI access not working after the migration and have had to roll back. I took a wireshark from the client at the time.After the roll back I have ran some packet captures on the live ASA and the non l...
I just got kind of similar issue to CSCwb94312https://community.cisco.com/t5/network-security/asa-unable-to-configure-service-on-port-22/td-p/1742513orhttps://community.cisco.com/t5/cisco-software-discussions/lost-ssh-access-to-asa-after-upgrading-fr...
Hello, I'm trying to enable ssh access on the inside interface. It's not working and I get this error message Unable to configure service on port 22, on interface 'INSIDE'. This port is currently in use by another feature. I did a show asp table sock...
FMCv - 7.4.2I made a change to my Global-ACP which should affect all managed devices, but when I try to deploy through the GUI, no systems are available.Is there a way to force a deploy from the GUI or CLI?-Thanks
Hello,I have this 3 interfaces on the ASA and want to config two vpns. Users should be possibleto connect from inside to mgadm and from outside to mgadm, but i can't get it work bothdirection at the same time. I need the NAT exemption for outside->mg...
HiIs there a way to remove some of the deployment history ? I see lots and lots on the FMC ?? Thanks
A quick validation question: Will Enabling and Deploying "TLS Server Identity Discovery" and/or "Encrypted Visibility Engine" features in FMC/FTD be impactful for data traffic? Will it matter if the FTD is in routed or transparent mode?
I am planning to upgrade to ASDM version 7.18. I do not want to upgrade ASA's . Can someone share upgrade procedure. note : we have ASA's as pair, please let me know if any additional steps are needed for the same.
if not selecting enable default information originate I am unable to use a route map within OSPF.. how do I get around this as I need to assign a route map but not use the default originate function
Check all the OSPF parameters and all seems OK. Show ospf vrf GC2_Inside OSPF not enabled on GC2_Inside The other 3 interfaces are showing the OSPF process but the Inside interface is not showing at all..
