Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About h.dam
08-22-2019
Stats
Member since
12-14-2001
105
Posts
0
Helpful
1
Solution
08-10-2019
04:25 AM
Hello, The route to the host is on the correct interface. I've checked the route using SHOW ROUTE on the FW and TRACEROUTE on a laptop.
... View more
08-02-2019
06:38 AM
Hello, On my ASA 5525-X, this message "Deny udp reverse path check on interface x" annoyed me very much each time after deleting and then reinstallating the VMs. It happened between v-management hosts and vcenter host. The workaround is: clear route all on ASA. Removing ip reverse path command line on interface is another solution but I'd like to protect my networks behind the firewall. My questions are: 1) It seems to me an arp issue but clear arp command didn't give effect. Only clear route command is working. I checked the routes using ping and traceroute showing no issue. Anyone can explain why? 2) I also doubted if something changed on cloning VM but I checked the arp table on ASA => no change Someone has this experience? Thank you in advance.
... View more
- Tags:
- asa
Labels:
01-11-2019
03:04 AM
Hello, Today we have tens of FWs 55xx-X and IPS (SFR software modules) in our infrastructure. I use ASDM to manage the FWs and FMC for IPS. I am now interested to use Cisco Security Manager to manage FWs instead of ASDM because of its global management features. Here's my question: From CSM datasheet, I found that it can also manage IPS. 1. Is it a double usage since I have already FMC ? I have one wall display for FWs dashboard and another display for IPS. 2. Is it possible to use CSM only for FWs and disable the IPS views? In case I keep using FMC for IPS. Thanks.
... View more
Labels:
08-01-2018
07:02 AM
Hi,
I copied a file from my laptop to firewall ASA using Putty SCP. On laptop I got output showing 100% success. But on ASA, when I run "Dir flash:", I didn't find the expected file. I checked also the sub-directories, there's nothing.
Is it a software bug? My ASA is 5525X with v9.8(1).
Regards.
... View more
- Tags:
- firewall
Labels:
07-10-2018
06:07 AM
Hi everyone,
I am testing the PSCP command in order to transfer secured files between my PC and my ASA 5525-X.
It seems to work since I had transfer copy speed and 100% listed as output on PC.
But when I run SHOW DISK0: on ASA, I didn't find the expected file.
On ASA, I have the config:
ssh scp enable
ssh version 2
ssh key-exchange group dh-group1-sha1
Thanks in advance.
... View more
Labels:
06-18-2018
03:02 AM
Thank you for your response.
I don't know what are the uses of these usb ports designed originally.
Especially on a security appliance where physical access is not permitted in most cases.
So I have to put sticker on it. Sorry that I have no other choice.
... View more
06-16-2018
08:55 AM
Hi Florin,
The firewall is ASA 5525-X with v9.8(1).
I'd like to disable the usb key as said on the title.
But I cannot disable it if I don't see disk1.
Regards.
... View more
06-15-2018
06:39 AM
I have inserted a usb key with FAT format on one usb port (below the mngt port), nothing happened.
When I run the command DIR, I saw only disk0.
... View more
06-14-2018
11:17 PM
Hi Florin,
thank you for your response.
I solve the issue by rehosting the licenses to FMC.
Now I'm happy to manage my IPS again.
Regards.
... View more
06-12-2018
07:33 AM
Hello,
I've just installed the FMW virtual appliance running on VMware. After adding a device (IPS Firepower software of a ASA5525-X) to be managed, it said licenses are "unlicensed". All licenses options are greyed.
Before this migration, my IPS software contains the Protection, Control, URL and Malware licenses. It works correctly. I can manage it via ASDM.
I also submitted the FMC license, it said it didn't need to install. My licenses are classical. I don't have a smart account.
Now, I lost some features when using FMC to manage the IPS.
Can someone tell me why I lost the licenses? Please show me how to correct this issue.
Thanks.
Regards.
... View more
Labels:
06-07-2018
04:39 AM
I've already tried this.
This command is not recognized.
Regards.
... View more
06-07-2018
02:07 AM
Hi everyone,
I would like to disable the usb port on the firewall in order to block physical access. But I didn't find the CLI command (ASA v9.8.1)
Having tried to search in this forum, people said it is impossible to do.
Did someone succeed to do it?
Thanks.
Regards.
... View more
Labels:
04-10-2018
12:45 PM
Hello,
By using packet tracer and wireshark, I found the snmp traffic going in and out the FW (but no hit-count changes)
On the NMS server side, if I run polling to devices, the snmp hit-count increases this time.
The server is configured to poll every second. But if I do nothing the hit-count stays stable. I don't know if it is the FW security feature.
Anyway, snmp works well.
Regards.
... View more
04-09-2018
02:11 PM
Hello,
I added the NAT static command on ASA like this:
object network ADM-network
subnet 192.168.1.0 255.255.255.0
nat (ADM, MGT) static 192.168.1.0
object network MGT-network
subnet 172.16.1.0 255.255.255.0
nat (MGT, ADM) static 172.16.1.0
But it didn't work. I still have the issue.
I think I cannot run a ping <zonename> on a FW as I do on router ping <src interface>. It is the FW ip spoofing feature.
... View more
08-10-2019
Hello,The route to the host is on the correct interface.I've checked the
route using SHOW ROUTE on t...
08-02-2019
Hello,On my ASA 5525-X, this message "Deny udp reverse path check on
interface x" annoyed me very mu...
07-19-2019
Hello, I use FMC VM version to manage the Firepower IPS software module
on FWs.When I tried to resto...
02-04-2019
Thank you for your reply.I don't have a smart account. But I am studying
your satellite solution as ...
01-30-2019
I have Protection, Malware and Control licenses for my IPS.I forgot to
say that FMC is impossible to...
01-30-2019
Sorry, I forgot to explain that my FMC is installed in a LAB
environment. So its impossible to go ou...
01-29-2019
Hello,I am configuring my company FMC security intelligence part. But in
the available objects tab, ...
01-11-2019
Hello,Today we have tens of FWs 55xx-X and IPS (SFR software modules) in
our infrastructure.I use AS...
11-06-2018
Thanks Adheesh for your quick answer. So, I have to find a solution to
get internet access for FMC. ...
11-06-2018
hello, As I mentioned, I don't have internet access. So it failed when I
clicked on update feeds.
11-06-2018
Hello, Connecting to FMC via ssh, I saw no Cisco Security Intelligence
feeds in the following direct...
09-12-2018
I have already tried this. The message is always there, it only resets
the counter. Regards.
09-11-2018
Hello, I'm working on Analysis Intrusion Events on FMC. I notice that a
message "Internal_Event_Sess...
Public Statistics
| Date Registered | 12-14-2001 08:26 AM |
| Date Last Visited | 08-22-2019 01:01 AM |
| Total Messages Posted | 105 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 15 | |
| 5 | |
| 5 |
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Master"){kind=icon}
