for you outside interface it has a RFC 1918 address mean you connected to a broadband router etc. in this case if your uplink device offer a ip address than put your outside interface in this way interface GigabitEthernet1/1 mac-address 7488.bbfb.a68a nameif outside security-level 0 ip address dhcp setroute  by doing this asa will insert a default route towared outside interface. ... View more

there is another way too. I  use this way more often. what you can do is, if you using putty. than cli (ssh/telnet) to the firewall. and follow this link https://my.kualo.com/knowledgebase/?kbcat=0&article=888 ... View more

This seem to be a bug in software. Found a very similar bug in cisco ASA code https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvn94307/?rfs=iqvred ... View more

version 9.1 to 9.x does not matter in regards to the configuration.   @Marvin Rhoadscould pult light on this. why dont you go into box and give command "config t# clear configuration all". this command will erase all configuration in your box apart from crypto key/s. however you lic will stay intact.     ... View more

what is the software ASA you running on. could be a bug in a software. ... View more

here are some useful link to help you     https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/111867-asa-failover-upgrade.html     https://www.petenetlive.com/KB/Article/0000733         ... View more

why you having this rule.   nat (dmz,inside) source dynamic any interface ! remember from security level 100 towards 0 traffic is permit your inside has security-level 100 and dmz has security level 50. so if you take this above command out you will be able to ping from inside to dmz. unless if there is a specific reason you want to keep this rule above.     ... View more

could you upload your configuration it would make more sense to us. ... View more

check this link could be a helpful for you     https://community.cisco.com/t5/network-management/traffic-cannot-send-out-through-management-interface-of-asa/td-p/2685131 ... View more

1. According to the link, do I understand that I can directly upgrade , and don't need to go through an interim version? ie, from 9.1(7)4 to 9.9(2)9 ? https://www.cisco.com/c/en/us/td/docs/security/asa/upgrade/asa-upgrade/planning.html   Correct go for it. document clearly say you can upgrade.   2. The flash also has "asasfr-5500x-boot-5.4.0-763.img" , but when I do a " sh ver",  it doesn't show the firepower detail. Is it that the module is not activated?  Can I go ahead with the upgrade while ignoring this part?   show module sfr detail use the above/earlier document to match and corralte for check which is suitable code for SFR with ASA9.9 if you using FMC for SFR or ASDM they give you good understanding with route to take. ... View more

try this       no access-list inside_access_in extended permit ip any any no access-list inside_access_in extended permit icmp any any no access-group inside_access_in in interface inside no access-group dmz_access_in in interface dmz   ! also in default policy     policy-map global_policy inspect icmp inspect icmp error ... View more