Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello, I have two ExpressRoute connections to Azure. They are on the ASAs. (Please see network diagram). Firewalls are running as standalone - no failiover pair. Core switch is running OSPF with firewalls. Firewalls are peering with AZURE using BGP. ...
Hello, I have two ExpressRoute connections to Azure. They are on the ASAs. (Please see network diagram). Firewalls are running as standalone - no failiover pair. Core switch is running OSPF with firewalls. Firewalls are peering with AZURE using BGP. ...
Hello,
I am trying to configure IPSEC vpn between Sonicwall firewall(108.60.x.x) and Cisco IOS router(74.62.x.x) that is also DMVPN HUB. Sonicwall is behind Velocloud SD-WAN (don't have much information besides public ip address). Sonicwall support...
I am trying to configure port forwarding from outside public ip address 50.xxx.206.91 to inside host 192.168.1.40. Port range tcp/udp 30000-30060.Outside ip address of the firewall is .90I can also use ip address of the outside interface if that is e...
One lesson from large migrations is that converting the configuration is only part of the project. The real work is validating object cleanup, NAT behavior, policy intent and application traffic before cutover. Automation helps a lot, but a structure...
Works on the FMC as well. Cert My-ASA-Cert.pem needs to be added manually (like the Azure cert) and then added into Devices-Certificates. Thanks a lot!
We can't do anything on the Azure side routers. Only ASAs. Prepending was done on the ASA2. Azure side does Active/Active and as far as I see the only way to influence that would be to use AS prepend (on the ASA side) with Public ASN. "TCP bypass wo...
Someone else configured that part. Not sure why they did it that way. Why would my access list not been hit?
Don't have the access to the router at the moment but I am pretty sure that I saw hits on the access list. Can post output later or tomorro...