Dears Please find the attached topology. I have some problem in understanding the fail over, whenever the port channel interface of DC-1 fails it shifts over to DC-2 FW but the perimeter firewalls doesn't shift and the traffic gets drops, hence if I ...
Dear Expert, I may Etherchannel on FTD 2110 appliance is staying in down state. When configuring on FMC I used active has state. PLease Help me with your Expertise to solve this. regards, Zanga
I have a very unusual situation. I have an ASA 5515-x running Cisco Adaptive Security Appliance Software Version 9.1(4) I have a stuck static route that I cannot remove from the device. I have tried clear configure route BGPDMZ:cerberus-01(config)# c...
I'm using ASA 5506-X. I have an external network, whose computers need to SSH into the ASA. To do this I configured:ssh x.x.x.x x.x.x.x outsideWhere x.x.x.x x.x.x.x is the external address range of the outside network somewhere else in the world.Wi...
Firepower Management Centre stops recording the user to IP mapping info and creates the ‘User Identity Dropped: User Limit Reached’ messages at between 17,000 and 18,000 users, this is nowhere near the 50k license limit for users.
I'm using an ASA 5506X and I wish to configure two site-to-site vpn tunnels, which go to two other sites with their own ASA's But the second VPN is not accepting the final configuration step of applying the crypto map to the outside interface. Why no...
I am trying to send a new asdm image to my cisco asa 5505 firewall. I have tftpd64 installed on Server 2008 R2 and the file I'm trying to send is in the same directory as the tftpd64; so it is accessible. The tftpd64 shows the IP of the server, secur...
Hi Community, I have a pair of ASA5516-X both with support contracts, and both are being managed by a virtual FMC running on VMWare.Now I have an issue with FMCv I need TAC support on, and I'm wondering does anyone know if FMCv is covered under the...
Hi Guys, We need to do Used based bandwidth limitation from CISCO ASA Firewall. CISCO ASA has the functionality to authenticate users and Bandwidth limitation quote (example 1 GB/Day). After that user got a message on the screen that user exceeds his...
Hello, I am deploying a new vFMC 6.2.3 (latest) on ESXI 6.5.0 and upon deployment of the OVA file, i get a blank login page ( with the URL /login.cgi) . Tried different browsers as well. I have looked at this post , redeployed the VM multiple times ...
Assume you have a FTD/ASA HA with combined failover/state link and no IP addresses configured on any interface. What happens when Failover link turns down? I think the active/standby roles remain on each device. But what happens when active device ge...
I've got an ASA 5506-X with some the following commands on it from a previous administrator: crypto ipsec security-association lifetime seconds 3600crypto ipsec security-association lifetime kilobytes 102400000crypto ipsec security-association pmtu-a...
So I'm working on moving our citrix enviroment to our new building. However once changing all the ip's and updating the access list rules, it wasn't working. Doing the sh logging command, I see the following blocking the citrix traffic on port 8080: ...
Hi all! I think my question is pretty simple, but i haven't done this before, and ASA in GNS3 still has some bugs so i'm having a hard time trying to emulate this. Consider the following configuration: So Gi0/6 between the Active and the Sta...
I have an ASA 5545 and we just upgraded to version 9.6(4)12 to fix a vulnerability PCI scan back in July that is done quarterly by a financial institution. The failed vulnerability reads: 316187 - Cisco Adaptive Security Appliance Remote Code Execut...
