I have been at this for a good long time and have read all the articles about management-access inside, tftp-server inside, or outside. I literally CANNOT download a new ASA image from tftp over a IPSEC vpn tunnel? What is the magic potion here?
Forum Posts
I am working on setting up an ASA5520 to use the TRACK and SLA MONITOR function to support failover to a backup DSL link. The route injection is showing metric of 1 for the backup link when primary service is restored, even though static route shows...
I'm currently trying to migrate a small to medium size config from an ASA5512 to an FPR2110 and I've tried using the Cisco Migration tool but it requires a connection to an FMC. Is there another method to get this done aside from the tedious manual w...
I tried to integration the Rapid7 InsightVM with the Cisco FMC 6.3. I found some of the the forums that's tried to integrated it but it seem doesn't work. Does anyone have some the Rapid7_connetor.pl script that's can be integrated with the InsightVM...
I am stuck configuring my ASA 5505 in transparent mode. When I use the management subnet (inside1) I can reach the internet and all is well. When I am using inside2 (different subnet) I can't. From the console I can ping both subnets and the intern...
Resolved! FMC : Managed Device Backup list empty !
Hi, I'm using FMC to manage 6 FTD's 2100. When I want to backup their conf : I went to : System/tools/Backup/restore/+Managed device backup : But the list is empty and I can not add any FTD:( see screenshot please) Any help please ?
i am trying to configure External Authentication method using LDAP so i can login to virtual FMC using AD credentials but failed , i configured External Authentication method following below article but failed when trying to test user https://www.cis...
I have configured Netflow on CISCO ASA 5516, but seems like I have wrongly configured the interface, can anyone help me to change the interface or remove the old netflow config and configure the new netflow configuration.If anyone can help me with th...
I have an ASA5505 running for some time with remote users able to access the central office LAN / servers etc and also able to connect to the internet via the central office connection. For local printing, these VPN (IPSEC) cleints use printers on t...
Resolved! ASA5506X Performance Capabilities
Hello, We have an ASA5506X running 9.6.1. We are currently running a VPN tunnel using: Ikev1 with AES-256, SHA1, and DH 2, and it runs very well. We are considering changing the config to use: ikev2 with AES-256, SHA256, and DH20. Can anyone tell m...
One of our clients deployed an ASAv in their Azure environment. I was informed they want to setup a S2S tunnel from it to their physical ASA at their HQ. I haven't been able to find anything on configuring the S2S tunnel on the ASAv side. Accordin...
Hi! Since recent availability of ASAv for Microsoft Azure I have question about network design. Currently it is possible to have 4 network interfaces in ASAv, so we limited to 3 subnets in Azure VNET. We have more than 3 subnets and Azure Gateway for...
Firepower management centre is not able to deploy policy to sensor modules. I have tried to deploy manually.Just noticed there appears to be some deployment failures and it has advised we raise a TAC case.I have tried to manually deploy and it still...
Hi, I am having proglem to get work from outside network to inside network. I have made nat rules etc already and giving permissson, tried use tcp and udp ports. Inside network everything is working. I have tried 1433 and 3838 ports both are working ...
Hi all, In the production network, we are using firepower 9300 with ASA 9.8.2. during NAT translations we are getting " Duplicate TCP SYN from CGN_INTERNET: X.X.X.X/58487 to CGN_INTERNET: X.X.X.X/25268 with different initial sequence number". please ...
