Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Florin Barhala
Online
Florin Barhala
Frequent Contributor
Network field engineer with a good understanding of nowadays network technologies and customer necessities. Direct experience with securing network perimeters and establishing safe network borders for a large array of companies profiles.
Recent Badges
Stats
Member since
02-02-2009
885
Posts
255
Helpful
32
Solutions
09-11-2019
03:14 AM
From what I saw so far, people use the first scenario with deny private ip range and then permit ip any. You can do it the 2nd way also, up to you. From auditing perspective, deny rule is also wanted as you could LOG and track later who's attempting local connections.
... View more
Created by
Florin Barhala
in Firewalls
in Firewalls
09-10-2019
09:54 PM
09-10-2019
09:54 PM
Here are some details about my issue: - I experienced issues running 9.8(4)8 ONLY on multiple context mode - I had the same on single context and ASDM was working fine - for me it worked to update from 9.8(4)8 to 9.8(4)10
... View more
09-02-2019
08:41 PM
This also bothers me? Does anyone know how to power on that module?
... View more
Created by
Florin Barhala
in Firewalls
in Firewalls
08-29-2019
08:46 PM
08-29-2019
08:46 PM
Hello, I am having the same problem running ASA OS 9.8(4)8 ASDM 7.12(2) JRE 1.8.0_221-b11 Win 10 ver1809
... View more
Created by
Florin Barhala
in Firewalls
in Firewalls
08-27-2019
11:24 PM
08-27-2019
11:24 PM
obj-tcp-9966 indicates the services that are to be mapped during the NAT translation. Let's say you want to map your HTTPS server which sites behind "inside_3" interface and you will use the public ip assigned to the outside interface. You are to use this line: nat (inside_3,outside) 1 source static obj-192.168.111.10 interface service https Now let's say you also want to forward http port and ftp port; you end up with three services: http, https and ftp. At this moment you can have 3 nat config lines one for each service, or you can create a service group containing the three services and call it: obj-tcp-mysrv and obviously use that service group on only one NAT statement.
... View more
08-16-2019
12:46 AM
I asked that because under same ASDM I have these two single routed mode FWs which keep asking for re-login. But there are several context mode FWs with same settings for "show run all http" which don't care about re-login/don't ask for password once I logged on, no matter how much time. Thoughts? P.S. all FWs OS version.
... View more
08-13-2019
11:49 AM
It might be - I ll try tomorrow; before that I have two questions: idle-timeout Idle timeout in minutes (single routed mode only in case of ASDM) session-timeout Session timeout in minutes (single routed mode only) I am clear about idle-timeout, but what exactly does session-timeout means? 2nd: If I have another firewall like this asa01/admin/pri/act#show mode Security context mode: multiple asa01/admin/pri/act# show firewall Firewall mode: Router Does this means none of the two settings do apply?
... View more
08-08-2019
09:28 PM
Hi guys, I have two 5506 boxes running 9.8.3 patch 29. I login first time with ASDM and perform whatever tasks. I left ASDM open and move to other windows (probably a browser); after couple minutes a pop up from ASDM login credetials shows up. Obviously if I return to ASDM to make any other change I have to again enter my password. Any idea how can I avoid re-login until next time I close/open ASDM? Here's AAA config: show run aaa aaa authentication serial console LOCAL aaa authentication http console RADIUS_GROUP LOCAL aaa authentication ssh console RADIUS_GROUP LOCAL aaa authentication enable console RADIUS_GROUP LOCAL aaa authorization command LOCAL aaa accounting serial console RADIUS_GROUP aaa accounting enable console RADIUS_GROUP aaa accounting ssh console RADIUS_GROUP aaa local authentication attempts max-fail 5 aaa authorization exec authentication-server auto-enable Thanks, Florin.
... View more
Created by
Florin Barhala
in Firewalls
in Firewalls
08-08-2019
01:03 AM
08-08-2019
01:03 AM
I am doing this for a while now ; I configured SNMP v3 on each context and I am polling an IP address from each context - had no issues.
... View more
Created by
Florin Barhala
in VPN and AnyConnect
in VPN and AnyConnect
08-08-2019
01:01 AM
08-08-2019
01:01 AM
Thank you very much, RJI! I did figured it out in the meantime; full story can be read and hopefully used by others here: https://community.arubanetworks.com/t5/Security/Cisco-ASA-VPN-Returning-IETF-Framed-IP-Address/td-p/219119/page/2
... View more
Created by
Florin Barhala
in Policy and Access
in Policy and Access
08-05-2019
09:18 PM
08-05-2019
09:18 PM
Hello, Did you solve this in the meantime? I can think of aaa-server CoA configuration to be checked.
... View more
Created by
Florin Barhala
in VPN and AnyConnect
in VPN and AnyConnect
08-05-2019
09:02 PM
08-05-2019
09:02 PM
Hello, I could not find another related thread about this. I need to "read" the Dial-In STATIC IP Address Attribute from AD username using Aruba ClearPass 6.7. If anyone managed to do it, please share the CPPM config details. Thanks, Florin.
... View more
08-05-2019
08:55 PM
You are in a heap of troble : )) Afaik this can be used by: - AnyConnect - EasyVPN (I am not 100% sure on this) What I would do: - find out the company's policy for Remote VPN Access: is this the appliance being used for AnyConnect IPSEC? - do you have AnyConnect SSL enabled/in use?
... View more
08-02-2019
11:14 PM
TCP/443 is "controlled" by the "show run http" output you have on your ASA. And it should use TCP only. As for 1883 I am not familiar with it, what's behind it on ASA?
... View more
Created by
Florin Barhala
in Policy and Access
in Policy and Access
08-02-2019
06:34 AM
08-02-2019
06:34 AM
Hello, I have configured today Cisco FMC 6.2.3.10 with Aruba Clear Pass with Radius. All went good until I had to pick the authentication method. I ended up with PAP. Does anyone know how can I "convince" FMC to agree for MSCHAP at least? How can I edit / choose Radius AUTH methold on Firepower Management Center? Thanks, Florin.
... View more
09-12-2019
I could spot a saved search named Dropped events as per the attachment -
but this is a search within...
09-12-2019
Hi Marvin,Can you please bring more light over this. All is in place and
"sh service-policy sfr" sho...
09-11-2019
From what I saw so far, people use the first scenario with deny private
ip range and then permit ip ...
Created by
Florin Barhala
in Firewalls
09-10-2019
09-10-2019
Here are some details about my issue:- I experienced issues running
9.8(4)8 ONLY on multiple context...
09-02-2019
That is good news ! I though I did it the wrong way all this time.I ll
recover all sensors and see h...
09-02-2019
I was about to uninstall it when I thought what if I reset it
first:sw-module module sfr resetModule...
09-02-2019
Sounds good, thanks man!If you have time please share the openssh
version on 6.4? I was requested to...
08-31-2019
I currently run FMC for VMWare v6.2.3.14 (build 41). I ll try with
reimaging using 6.2.3 for the sen...
08-30-2019
That makes sense ; how can anyone determine SFR status?I reviewed this
command, but the output retur...
08-30-2019
Thank you Marvin!I do have one more question/concern when it comes to
SFR;As we speak I have the SFR...
08-29-2019
When you say reinstall you mean recover?sw-module module sfr recover
configure image disk0:/asasfr-5...
08-29-2019
Hello,I had several A-P 5525X running 9.6(4)12 for the past two years.
The SFR modules were running ...
Created by
Florin Barhala
in Firewalls
08-29-2019
08-29-2019
Hello,I am having the same problem runningASA OS 9.8(4)8ASDM 7.12(2)JRE
1.8.0_221-b11Win 10 ver1809
Created by
Florin Barhala
in Firewalls
08-27-2019
08-27-2019
obj-tcp-9966 indicates the services that are to be mapped during the NAT
translation.Let's say you w...
Public Statistics
| Date Registered | 02-02-2009 03:30 AM |
| Date Last Visited | 09-16-2019 01:16 AM |
| Total Messages Posted | 885 |
| Total Helpful Votes Received | 255 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 265 | |
| 5 | |
| 10 | |
| 5 | |
| 5 |
.jpg "Hall of Fame Master"){kind=icon}
.jpg "VIP Mentor"){kind=icon}
Helpful Votes From
