Hi Everyone   I'm trying to get a couple of engineers to set up a site to site VPN up for me. I cannot see the actual firewall CLI or GUI. Our side is an ASA and the other side is a Palo alto. The phase 1 and 2 parameters seem to be correct however the tunnel is not coming up. The engineer at the ASA side cannot give me much information however the palo alto engineer is telling me that his firewall is complaining about peer ID:   0x104d5420 vendor id payload ignored ignoring unauthenticated notify payload   The problem is, I know what the Peer ip address is but i've never configured a peer ID on an ASA nor is one configured on the device for the problem above.    Can someone help to explain why this is happening please.    Thanks  ... View more

Hi everyone   Im upgrading the firewall hardware. I saved the identity certificates from the old firewall and then I took a screenshot of the ASDM which has the identity certificate information.    I then realised that one of the certificates has more than one associated trustpoint in the screenshot. I can see one trustpoint then a comma and then i cant completely read the second associated trustpoint.    I no longer have access to the ASDM but i can get hold of the config file. I want to try to add the identity certifiacte via the ASDM as i'm more comfortable with it.    My question is, is there any way i can find out what the second associated trustpoint is from the config file? If i can, is it possible to just add the ID cert via ASDM by entering the certificate name as the two associated trustpoints separated by a comma?    thanks  ... View more

Hi Everyone   We tried logging into the our (latest ver) smart collector a couple of weeks ago and noticed that the security key that you have to enter when entering your password no longer shows up on the main page.  It was working before this. we have restarted the virtual machine too. Has anyone had this issue before?    Thanks   faheem     ... View more

Hi everyone. I think i posted this in the wrong forum so i'm hoping this is now the right one.   when installing an identity certificate from the CA i'm getting the error:   "You can not import this certificate, because it has not been configured for manual enrollment"    Any ideas? has anyone come across this?    Thanks ... View more

Hi guys   when installing an identity certificate from the CA i'm getting the error:   "You can not import this certificate, because it has not been configured for manual enrollment"    Any ideas? has anyone come across this?    Thanks       ... View more

Hi all   I'm migrating a config over to a new firewall. I noticed the the ca certificate expires in 2022. However when i go into the identity certificates section on the asdm, the certificate has expired.    My question is, to get a new certificate, do i need a root certificate to generate a CSR file? or do i just generate a CSR file and then send this to the someone like verisign or godaddy? Would i need the verisign/godaddy root certificate to generate the CSR file properly?      Thanks   ... View more