Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Marcel Maeder
08-15-2019
Stats
Member since
09-16-2011
36
Posts
14
Helpful
6
Solutions
07-15-2016
07:50 AM
Hi swasserroth
Yes, with this configuration it works for IPv6 too.
... View more
07-12-2016
12:05 AM
With the Firepower Management Center you can manage all these IPS with one GUI. I don't know if you can add the devices to two management centers and how they behave then.
... View more
07-08-2016
10:34 PM
Is it a site to site vpn? Does other allowed traffic work? Do you use vpn filters?
Could you send us the relevant config (service policies, interface acl, vpn-filter)
... View more
07-08-2016
05:45 AM
Do you need an IPS just for perimeter or in the internal network?
Does every site need an IPS?
How much traffic does it need to process?
... View more
07-08-2016
05:41 AM
You can use the threat defense image, so you just have one firewall to configure (check the prerequisites). Or you just allow all traffic on the ASA and redirect everything to firepower.
... View more
07-08-2016
05:20 AM
VLSM in general is okay, but you should route the addresses with a transit network between the ISP and ASA.
... View more
07-08-2016
05:15 AM
Is the VPN tunnel you tested up? Do you have ftp inspections enabled at the service policy?
... View more
07-08-2016
05:06 AM
Is the network 10.10.10.0/24 directly connected to the ASA or statically routed?
The way access-lists work you'd have to enter the deny before the permit. But in OSPF you can't exclude single IPs beause the LSA contains whole networks. So no.
The easiest way woud be to statically route 10.10.10.20 on the other device to the right destination.
... View more
07-08-2016
04:59 AM
Sorry for digging out old threads. You can use local lan access with an extended access list with a host object with the IP 0.0.0.0 as source.
Unfortunately I didn't find out how to do this with IPv6
object network obj-0.0.0.0 host 0.0.0.0 access-list LOCAL-LAN-ACCESS extended permit ip object obj-0.0.0.0 any4
... View more
07-08-2016
01:45 AM
Hi
How can I filter ingress route in ospfv3 on an ASA 9.6? In ospfv2 I can use the distribute-list together with an ACL.
Thanks Marcel
... View more
Labels:
01-22-2016
02:11 AM
Hi Peter
Thank you for the explanation. It now makes sense to me.
Regards Marcel
... View more
01-21-2016
07:10 AM
Hi
The frame length of an Ethernet-II frame isn't specified in the frame itself, but determined by the IFG (Inter Frame Gap) in 10Base-T. Does a store and forward switch now have to go through the whole frame again to check the FCS? Or can it calculate the FCS while receiving the frame and somehow know not to include the FCS field itself for the calculation?
Regards Marcel
... View more
Labels:
06-11-2015
10:25 AM
Hi Unfortunately it's not supported in the release you have installed [0]. Check this [1] release, it introduces support for WCCP. [0] http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/15-0_1_se/release/notes/OL25302.html, ctrl+f wccp [1] http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/15-2_2_e/release/notes/OL32530.html
... View more
06-11-2015
10:09 AM
Hi Do you have an access policy which matches the non-decrypt identity? What does the policy trace say? And which version are you using?
... View more
06-10-2015
12:19 PM
You can use the reports which are on the device itself. If this isn't enough, you can use a log tool such as splunk [1]. There is also an additional license called Advanced Web Reporting, which is also based on splunk [2]. [1] http://wiki.splunk.com/Set_up_Splunk_for_Cisco_IronPort_Web_Security_Appliance [2] http://www.cisco.com/c/en/us/products/collateral/security/web-security-appliance/datasheet_c78-729104.html
... View more
07-12-2016
With the Firepower Management Center you can manage all these IPS with
one GUI. I don't know if you ...
07-08-2016
Is it a site to site vpn? Does other allowed traffic work? Do you use
vpn filters? Could you send us...
07-08-2016
Do you need an IPS just for perimeter or in the internal network? Does
every site need an IPS? How m...
07-08-2016
You can use the threat defense image, so you just have one firewall to
configure (check the prerequi...
07-08-2016
VLSM in general is okay, but you should route the addresses with a
transit network between the ISP a...
07-08-2016
Is the VPN tunnel you tested up? Do you have ftp inspections enabled at
the service policy?
07-08-2016
Is the network 10.10.10.0/24 directly connected to the ASA or statically
routed? The way access-list...
07-08-2016
Sorry for digging out old threads. You can use local lan access with an
extended access list with a ...
07-08-2016
Hi How can I filter ingress route in ospfv3 on an ASA 9.6? In ospfv2 I
can use the distribute-list t...
01-21-2016
Hi The frame length of an Ethernet-II frame isn't specified in the frame
itself, but determined by t...
06-11-2015
HiUnfortunately it's not supported in the release you have installed
[0]. Check this [1] release, it...
06-11-2015
HiDo you have an access policy which matches the non-decrypt identity?
What does the policy trace sa...
Public Statistics
| Date Registered | 09-16-2011 08:26 AM |
| Date Last Visited | 08-15-2019 11:36 PM |
| Total Messages Posted | 36 |
| Total Helpful Votes Received | 14 |
Helpful Votes From
