Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello, we have a bunch of ASA firewalls with FirePOWER modules and we recently upgraded them to a latest 6.2 version of code. I have been getting some AAB (Automatic Application Bypass) related health events and i was wondering if there is a way, thr...
Hello, We have 3 remote locations connected to our HQ via 2 Point-to-point circuits from the same Carrier/Provider for each location. From an OSPF perspective, each site is a different area with the 2 HQ WAN Routers playing the role of ABR. At the HQ...
Hello,
in the ASA world, when you had to upgrade a failover pair, you would upgrade the Standby unit, once the upgrade is complete and everything looks fine in the "show failover" command, you would failover to that unit, do all your testing and if...
Hello,
We have 2 FTDs 2110 deployed in a HA pair. The HA pair is managed through a FMC.
FMC is running 6.2.3.3-76
FTD pair is running 6.2.3-83
I want to upgrade the FTD pair to 6.2.3.3-76 and according to Cisco's guide Readiness Check for Clust...
Hello,
I have an ASA Firewall with SFR capabilities that has 2 routed interfaces: Inside and Outside. I need to reconfigure the physical inside interface, make it trunk and create 2 subinterfaces: one will be the previously inside interface and add...
Hello! thumbs up for mentioning that ISPF functionality of OSPF which I was not aware it existes. Truth is that for now, I would go with the solution I already mentioned (use VLAN tags to create a Hub and spoke topology within the VPLS cloud). Howeve...
Hello Richard thank you for your reply. I was actually considering converting the Remote Location WAN router/switch to be the ABR, my only concern about that would be that, statistically, the point where a failure could occur is the WAN circuit and I...
Hi Marvin,
thank you for the reply.
I hope that in a future release they will introduce a timer that you can leverage in order to have some time to do some thorough testing before upgrading the next unit. As it stands right now, if your network i...
Hello,
thanks for the reply.
I am using an ACL to redirect traffic to the module.
So after I make all the changes on the ASA interface, I would have to push policy. By doing this the new ASA interface will show up under the Device configuration...