Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm helping a customer with a route-based VPN to Azure Virtual WAN. The VPN itself is working fine — I've configured two tunnels to Azure, one per gateway instance. With static routes pointing to Azure's networks via each VTI, everything worked witho...
I've been trying to setup a VPN tunnel between a FTD and Azure, but I am having some issues where one BGP neighbor is stuck in Idle/Connecting.I don't have any access to the Azure side. That part of the configuration is done by my custumer. Here is t...
Hello,A customer have a vFTD in production and he also have a 1140 appliance that are currently not in use.He now wants to shut down the virtual FTD and move everything to the 1140 and he have asked me about the licenses that they currently use on th...
Hello,Is there any posture features we miss if we want to do posture on RA VPN clients without ISE and instead use Hostscan and DAPs in the ASA? Are the same posture checks availible? I understand we also can get Advanced Endpoint Assessment for reme...
Hi,I just noticed some elephant flows under security-related connection events. Is this correct? We have elephant flow detection enable, but I am not sure if they should be classified as Security-related and not just normal connection events?Thanks/C...
Thank you @jamestormi This was really helful information. When you say "the standard and officially supported approach is to allocate a second public IP to your FTD" does this require a dual ISP setup or can we just add an interface (outside2) and ...
Thanks, so then I guess this is normal that those events get classified as security-related.Since this traffic is trusted I will bypass those elephant flows from the Snort inspection.
Thanks Marvin, I will speak with the customer, and I agree this is properly a better approach. We could then do shaping instead of policing, which would be less aggressive.