Hi all, I'm seeing weird log entries on my firewall. Like this: 2019-02-11 09:22:55 Local6.Notice 192.168.10.10 Feb 11 2019 09:23:03: %ASA-5-106100: access-list VLAN100_access_in permitted tcp VLAN100/172.24.2.163(8021) -> VLAN200/172.24.0.163(51804)...
Forum Posts
Hello everyone, We have ASA5525X with Firepower SFR module where we are implementin SSL decryption with known key for internal servers. Right now we are planning changing our Citrix Netscaler load-balancers with F5 and security department is going ...
Resolved! Setting up Cisco ASA firewall
Hi everyone, can you guys help me with this one? From the topology, PC1 to PC3 needs to connect with the Server using ssh.Here's the details:[IP Address]1. PC 1 : 192.168.1.2 2. PC 2: 192.168.2.23. PC 3: 192.168.3.24. SSH Server: 10.109.80.855. TP Li...
Hello to all, I am receiving an abundance of these particular type of alerts. --133:59:1] dcerpc2: SMB - Nextcommand specified in SMB2 header is beyond payload boundary [133:27:2] dcerpc2: Connection-oriented DCE/RPC - Invalid major version How can ...
Hello, We have 2 x 5516x ASAs in active/standby and their outside interfaces go into a stack of 2 x 3750s. In this switch we also have our ISP routers which are setup as a HSRP. The active router is on 100MB line and the standby router is on 30MB. ...
Hello Community, I was wondering if for e.g. especially for Inbound SSL-Decryption Rules it is possible to integrate Cisco Firepower appliances with any 3rd party HSM, so that private keys, etc. will remain outside the Firepower appliance ? Greet...
Resolved! PAT Config post 8.2
Hi All! So I have avoided the new form of NAT config for as long as I can. I downgraded my ASA 5585-X to 8.2 to avoid it. But now I must get it up to the latest code. I have been searching, but to no avail, how to handle the PAT in this new form. My ...
Hello all, I have a Cisco ASA5585.ASA5585X/admin/pri/act# show verCisco Adaptive Security Appliance Software Version 9.8(3)16 <context>Firepower Extensible Operating System Version 2.2(2.107)Device Manager Version 7.9(1)Compiled on Mon 05-Nov-18 20:5...
Hello Everybody, lately we tried to implement User-Control with our Firepower Firewall, and run into an errormessage when trying to connect the UserAgent to the AD: I had to blurry the details for clear reasons, but the point is that the er...
Hi, I currently have a Cisco ASA5516 running on ASA version 9.8(2). I am trying to create an access-list from a source ip address to a destination URL. I am unable to get an ip address range from the vendor of the URL. I will please like to know if...
Hi there, I have a bit of a weird issue, last week we have decommissioned an old rack that had 2x ASA-5525-X units in it. I remember that the units where configured in Failover mode. But the admin who last configured these is no longer with the comp...
Resolved! ASA 5506-X NAT issue SSH
I feel like I'm on the cusp of figuring it out, but I've had issues and spent many, many hours hitting this with every form of documentation and help forum. I'm trying to do a NAT with an ACL from an external static IP to an internal one on a DMZ. To...
ASA5506-x with 9.9.(2) I did a configure factory-default BVI1 is set to 192.168.1.1 Then changed the outside interface to a static IP and added a Default static route From the ASA, I can ping the static route IP from the Outside interface BUT I c...
Hi.Can you please tell me where do I connect the RJ45 from SSM10 to?And what IPs should I give?When I try to connect to it from within ASDM it says port 443.Thanks.
I am configuring 2 Model 2140 Firepower NGFW's in a high availability cluster through the Cisco Firewall Management center server. I have the cluster up and operational and have a separate IP address assigned to each firewall's management interfa...
