Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello Team,
We have got a request from our client to add a security policy on the Cisco FTD(4115). The security policy has 800 Network objects(IP addresses and subnets) in the target field.
We are not sure how this will work because the firewall is ...
Hello Folks,
We have got a new requirement from the client to configure IPsec S-2-S VPN with their 2 remote sites. This means at our end VPN is built on ASA 5545-X(managed by FMC) and the remote end is 2 client sites.
The encryption domains are the ...
Hello Experts, Could someone refer to a document on how to calculate the data throughput of the Cisco ASA 5555-X threat defense firewall? I have checked many articles on the Cisco community forum but they are not accurate and don't give us a correct ...
Hi Team,In regards to MSO upgrade, I have been referring some documentation of Cisco and I did not get the exact answer. Please assist -We are planning ACI Fabric Upgrade(3 APIC, 2 Spine, 6 leaf, 3-node MSO).APIC - 4.2(1j) Spine/Leaf - 14.2(1j)MSO - ...
Hi Guys, I am trying downgrade Nexus 93108TC switch from the current ACI 14.2 firmware to NX-OS 7.0(3)I7(8). I am following steps given in the below document however got stuck at step-6. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexu...
Hi Rob, thank you for your response.
We are running FMC code version 6.6.1 so we cannot use the bulk upload feature. However, let us try the python scripting if that works.
Hi Marvin, thanks for your response. I did notice the security intelligence feature where we can upload IP lists to blacklist or whitelist IP addresses, but there is no way we can permit those IPs from the specific host address.
Hi Guys, please ignore this as we got to know how to achieve this. There is an option to add a backup peer IP. I didn't notice initially. Anyways, thanks for your response.
Thanks, @MHM Cisco World . I did look at the HUB and Spoke option but I am not sure if it will work as Primary and secondary meaning, both VPNs will use the same encryption domain but the VPN with one of the client sites is active and the VPN with an...
