Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Ajay Saini
02-11-2019
Stats
Member since
09-13-2016
494
Posts
350
Helpful
71
Solutions
01-20-2019
08:21 AM
Hi Mark,
Sorry for delayed response, I have been busy with few things. This is not possible on WSA as of now and got a confirmation from BU. Only possibility is to host an image on some server and set the URL for that image as a URL in html coding.
HTH
AJ
... View more
01-20-2019
07:35 AM
Hi Experts,
We have a AMP Virtual Private cloud setup running on a VM with 2 NIC - one for the management and other for the AMP Console.
I understand that the management is majorly used for the initial setup and configuring management related tasks and the console for the endpoints to connect and also for other devices like WSA, ESA etc to connect for disposition.
The question is - in a proxy mode deployment, the AMP VPC will go to public cloud as well to get dispositions and other updates, what interface does it use. I have dug into all the possible documents and forums but could not find a related document or a guide..
Thanks in advance,
AJ
... View more
11-15-2018
10:38 AM
Thanks for the response Balaji, we already tried that option with placing the image in the same folder but that did not help.
We also tried the complete URL including the domain name of WSA and also the ip address but does not work, unfortunately.
Thanks,
AJ
... View more
11-14-2018
07:41 AM
Hello Experts,
We have a physical WSA appliance and the requirement is to customize the EUN page, for example, for the URL Category. We were able to locate and download the HTML page using FTP client and have modified the content.
The question is that after customization, we have been provided a background image that is referenced in the HTML script. We Pushed the HTML page back to WSA and we are able to see the content as per modified page but the background photo is not getting populated.
Where is this background image supposed to be uploaded on WSA, We tried to copy it into the same folder where the html page is located but it does not work. Is there a different directory/folder in WSA where the logos and images are located which can be referenced in HTML EUN page or it has to be in some server locally hosted in network somewhere.
Hope the requirement makes sense.
Thanks,
AJ
... View more
Labels:
10-24-2018
12:40 AM
Hello,
If the ftp is outbound, the ftp inspection should not be required. The secondary data connection will be initiated from the client and should pass through unless there is an access-list preventing that connection.
Could you collect wireshark captures from the host machine while attempting to connect so that we can see where this is failing. Please note that this might contain sensitive info.
HTH
AJ
... View more
10-21-2018
11:06 PM
Hello,
If 'show xlate' does not throw any output then maybe there are no translations currently. You can check for static and dynamic translations by checking output of 'sh xlate type static' or 'sh xlate type dynamic' .
I checked in my environment and it works perfectly.
HTH AJ
... View more
10-21-2018
11:00 PM
Hello,
The issue is not clear, could you please include details and the hardware you have - is this ASA with SFR module in inline mode?
What I understand is that there is ASA 5516 x with SFR modules and once failover happens, the traffic for internet does not pass through the ASA. Could you please elaborate with the topology as well.
HTH
AJ
... View more
10-13-2018
08:14 PM
Hello,
The reset-I indicates a reset packet coming from a higher security interface and reset-O coming from lower security interface.
Generally speaking, RST does not always means an issue. Sometimes, the RST packet is a normal communication mechanism. If you wish to identify the complete TCP stream, better take wireshark based captures on both ingress and egress interface on ASA and follow the TCP stream:
https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118097-configure-asa-00.html
https://community.cisco.com/t5/security-documents/asa-using-packet-capture-to-troubleshoot-asa-firewall/ta-p/3129889
HTH AJ
... View more
10-10-2018
10:58 PM
Hello,
Is this management the actual management interface or you are using the LAN interface for accessing ASDM and SSH?
If the interface is LAN interface, below applies:
Is there a 'management-access <interface-name>' command added already.
https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-device-manager/118092-configure-asa-00.html
If you can paste the relevant running config, we can have a look.
HTH
AJ
... View more
10-09-2018
09:12 PM
Hello,
If you are unable to reach the gateway, its likely that its an ISP issue. As I mentioned earlier, do you get same results when connecting a laptop instead of the ASA. Try checking with ISP if the issue happens with laptop as well.
For the ping from-the-box you don't need an access list.
HTH AJ
... View more
10-09-2018
06:41 AM
Hello,
Looks like the ASA is configured as a DHCP client, does it receive an ip address from ISP:
check output of 'show ip' and 'show route'
Is this a new setup or something changed? For testing, you can connect a laptop to modem and see if it gets an ip address from modem.
HTH
AJ
... View more
10-08-2018
10:44 PM
Since ASA does not own that ip address, thats a valid reason why it should be sending the host unreachable error message.
Ideally, in a router scenario, you would have created a loopback interface and tested, but ASA won't be as friendly as you want it to be. I would suggest looking for alternatives.
HTH AJ
... View more
10-08-2018
01:57 AM
Hello,
So, this wont work for across the interface if you want to source from ASA interface or ping to the ASA interface when not connected to the interface.
HTH AJ
... View more
10-07-2018
11:58 PM
Ah, if you are trying to ping outside ip addresses sourced from inside interface of ASA, it will never work. Thats ASA design, you should source the interface of ASA which has the route towards the destination to be pinged.
-
HTH AJ
... View more
01-20-2019
Hi Mark, Sorry for delayed response, I have been busy with few things.
This is not possible on WSA a...
01-20-2019
Hi Experts, We have a AMP Virtual Private cloud setup running on a VM
with 2 NIC - one for the manag...
11-15-2018
Thanks for the response Balaji, we already tried that option with
placing the image in the same fold...
11-14-2018
Hello Experts, We have a physical WSA appliance and the requirement is
to customize the EUN page, fo...
10-24-2018
Hello, If the ftp is outbound, the ftp inspection should not be
required. The secondary data connect...
10-22-2018
Hello, How do you know that a specific rule is being hit for users not
called in that rule config? D...
10-21-2018
Hello, If 'show xlate' does not throw any output then maybe there are no
translations currently. You...
10-21-2018
Hello, The issue is not clear, could you please include details and the
hardware you have - is this ...
10-14-2018
Hello, You are correct, Firepower is the answer for the CSC moving
forward. As long as you have the ...
10-13-2018
Hello, You can install the certificate on ASA from CA to be used for
firepower using below link. Thi...
10-13-2018
Hello, What is you remove the command from FTD to remove the manager and
reload the device and add a...
Created by
Ajay Saini
in FirePOWER
10-13-2018
10-13-2018
Hi Shivam, How are you? It doesn't look like the ping is reaching the
destination, the last hop IP i...
10-13-2018
Hello, The reset-I indicates a reset packet coming from a higher
security interface and reset-O comi...
Created by
Ajay Saini
in FirePOWER
10-13-2018
10-13-2018
To be very frank, this is a vague info and not helpful in identifying
the root cause. To move furthe...
Public Statistics
| Date Registered | 09-13-2016 10:12 PM |
| Date Last Visited | 02-11-2019 12:21 AM |
| Total Messages Posted | 494 |
| Total Helpful Votes Received | 350 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 25 | |
| 10 | |
| 25 | |
| 5 | |
| 5 |
.jpg "Hall of Fame Master"){kind=icon}
.jpg "VIP Advocate"){kind=icon}
Helpful Votes From
