About Chess Norris

Chess Norris · 08-17-2022

Hello, We need to migrate an ASA 5585-X to a FTD with about 1000 AnyConnect users. Authentication is done with both client certificates and Azure MFA. I am looking for some help with the steps required for doing this. I am guessing that I need to ins...

Chess Norris · 08-02-2022

Hello, We have an ASA5585-SSP-20 with both IPS, Malware and URL filtering licenses. This ASA is EOL and we cannot extend the licenses and the will expire next month. We are migrating to a FTD 4112-X, but the delivery was delayed and we just received ...

Chess Norris · 07-29-2022

Hi, Is it possible to use BPR in FTD and route traffic to different gatways based on source networks? I have two interfaces configured in the FTD, both are on different /28 public subnets. I also have about 30 private subnets, each on its own subinte...

Chess Norris · 07-26-2022

Hello, I am in the process of migrating ASA code to FTD (7.0.1) but there is one command in the ASA that I cannot figure out where to configure in FMC. On the ASA I have the following RA VPN settings configured under tunnel-group general-attributes a...

Chess Norris · 07-19-2022

Hello, Does anyone know if it's possible to run RA VPN on a user-defined virtual router in FTD or if that's only suported in the global virtual router? /Chess

Chess Norris · 08-17-2022

Thanks. So in order to get the client VPN connection to work, it should be enough to enroll the CA Root certificate in order to properly validate the certificate of the connecting client? /Chess

Chess Norris · 08-02-2022

Thanks for clarifying this. /Chess

Chess Norris · 07-29-2022

Great to know that it works and thanks a lot for the links. /Chess

Chess Norris · 07-29-2022

Yes, you are right about that. I found out that this command is a default command and only visible by the "show run all" command. The reason it was visible in the ASA cli code, was because someone have made a change to the default setting. /Chess

Chess Norris · 07-27-2022

@Marius Gunnerud I tried to find this option in the as a device manager, just to see exactly what's it called there and see if I can find something similar in FMC. The RA VPN parameters use similar names in ASDM and FMC, but I cannot find this optio...

Member Since	‎07-26-2010 08:21 PM
Date Last Visited	‎08-17-2022 01:20 AM
Posts	228
Total Helpful Votes Received	116

User Statistics

User Activity

ASA to FTD migration. Need som help with certificates

Firepower and expired licenses

FTD and PBR with two default gateways

Configure secondary-username-from-certificate in FTD?

RA VPN on a user-defined virtual router in FTD

Re: ASA to FTD migration. Need som help with certificates

Re: Firepower and expired licenses

Re: FTD and PBR with two default gateways

Re: Configure secondary-username-from-certificate in FTD?

Re: Configure secondary-username-from-certificate in FTD?