Folks, I have an ASA and would like to see why my ipsec tunnel is not coming up.I enable logging. and then type in "debug crypto isakmp", but see nothing, in old pix could, it was so easy to troubleshoot but with 7.x code is there a good command to s...
Forum Posts
Resolved! FTD and AD sync with user agent
I'm trying to use the AD user integration to allow certain groups to access Facebook and deny others. I realize I need AD integration with the user agent for firepower but this is a standalone FTD with no FMC as the documentation for this setup shows...
Hello all- Need to setup a NAT based on destination port ASA 9.6.4 Source 202.1.1.18 routing to 202.1.1.17 on inteface vlan419int if destination port is 12154 need 202.1.1.17 to NAT TO inside interface host 192.168.1.10 if destination ports are 121...
Resolved! Firewall 5506-x blocking all DNS queries
Hi all I am observing my firewall 5506-x since a month that after 2 or 3 days, firewall suddenly stop resolving DNS queries and all internet traffic stop. while in this situation IP communication remain OK which means i can ping/browse across the fir...
Resolved! FTD block traffic in same VLAN
I have Ftd but still in test environment as we have try to get it on production two times but it fail because it blocks the traffic in the same vlan i know its wired but that what happened the hosted in same vlan is blocked a cant even ping its al...
Hello Experts, I am facing a weird issue on my ASA firewalls. We have currently ASA 5550 with ASA version 9.1(7)16 for Anyconnect SSL VPN. We want to replace those devices because they are EOL and because we needed an ASA version that supports PerA...
OP - please delete this post
I have a new FP2100, can someone show steps and commands to determine the box comes with which image?
Hello We currently have a site to site VPN from outside interface 5555x to a 3rd party, Our staff access services inside their network and they can access some servers on our side through the VPN, My question, Is it possible to allow them through th...
Hi: I have an ASA 5520 configured only for vpn termination. It is not the network's firewall, security appliance, etc. On the primary firewall (non Cisco) I have hairpinning set up to allow local client to access publicly natted resouces by the p...
hi, 1. we have Firepower 2110 device, which comes with asa 9.8.2 image, when we try to connect to asa from FXOS, we are not getting the connect asa option, there is only connect local-mgmt. option. we cross check the configuration with the working ...
I'm trying to setup my FMC 1000 and FP 7030 sensor to send syslogs to an external server. All I really want for now is anything that gets populated under System->Monitoring->Syslog. I don't really care about intrusion alerts or things like that for...
We have a customer that has several McAfee Sidewinder firewalls with 350+ rules on them and they are converting them over to some ASA5545X with 8GB of RAM on them. Are there any tools to assist with the conversion of those configurations to the ASA'...
Resolved! Routing across ASA / NAT
Hi, I have searched high and low over the last few days and couldn't find exact answer that would actually work in my case. I have the following setup: Essentially the network connectivity to my home is presented via 'business line' router that offer...
Need to uninstall CX then install Firepower on a live system. Any Docs on creating basic Policies to start with FirePower?
