Hi Mark, In addition to the great points above, it is always best to look into the release notes for FTD as we get new features integrated with the newer releases going forward. Cisco Firepower Management Center - Release Notes - Cisco Thanks, Vibhor ... View more

Hi Jeffrey, Ideally, we try to archive the old FXOS version(Interim patches) as we come up with the new releases. Is there a specific reason you are looking for 2.1.1.66? If yes, we can get that specific code from TAC also but it is recommended that if you are planning to update the system, it should be on the latest code as suggested by the upgrade path: - Cisco FXOS Release Notes, 2.1(1) - Cisco Hope that helps. Thanks, Vibhor ... View more

Hi, The only option which you have would be to implement Trust Sec configuration which which works with ISE: -  http://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/firewall/asa-96-firewall-config/access-trustsec.html Thanks and Regards, Vibhor ... View more

Hi, Refer this for information on Firepower license:- http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118396-technote-firesight-00.html You would be able to migrate from the Legacy IPS to Sourcefire easily. I think if you have a Cisco Support contract , check with the licensing team on the licensing related queries. licensing@cisco.com Thanks and Regards, Vibhor Amrodia ... View more

Hi, Were you able to check the Debug level logs from the ASA device at the time of the issue ? I think the disconnections should have a reason if the ASA device might be dropping it. Thanks and Regards, Vibhor Amrodia ... View more

Hi, I would say the first thing that you should do would be to collect the "logging level debug" syslog for the IP address that you are testing with ? Thanks and Regards, Vibhor Amrodia ... View more

Hi, I think the 'debug pppoe event/error/packet' would help. Also , provide the PPPOE configuration. Thanks and Regards, Vibhor Amrodia ... View more

Hi, By Default , traceroute is blocked thru the ASA device. Also , can you paste the output of traceroute and what do you want to block ? ALso , mention the address of the ASA device ? Thanks and Regards, Vibhor Amrodia ... View more

Hi, Try to use the ACL bidirectionaly and see if that works. Also , verify the reason for disconnection of the connection using the syslog ? Thanks and Regards, Vibhor Amrodia ... View more

Hi, You can try using the workaround mentioned in this enahncement and see if this works in your environment:- https://tools.cisco.com/bugsearch/bug/CSCtw63096/?reffering_site=dumpcr NOTE:- This is not supported by CISCO. Thanks and Regards, Vibhor Amrodia ... View more

Hi, Yes , you have to configure logging on every context seperately to send the syslogs. For the 2nd issue , you can share that interface in multiple contexts and send the traffic through. Refer:- http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/monitor_syslog.html#pgfId-1082019 Thanks and Regards, Vibhor Amrodia ... View more

Hi, Can you post the related configuration from the ASA 5510 ? Also , the output of tracer ? So , as per you only thing which does not work is the remote access to the Remote PC's ? Is that correct ? Everything else works ? Also , have you tried to capture traffic on the Egress interfaces of the 5505 to see if the traffic is even reaching to the other end or not ? Capture:- https://supportforums.cisco.com/document/6971/packet-capture-asapix-fwsm Thanks and Regards, Vibhor Amrodia ... View more

Hi, I think this might be related to the NAT configuration. ALthough , it seems to be correct i.e. ONe to One NAT but can you try changing this to:- nat (Voice,outside) 1 source static OBJ_Cube OBJ_50.X.X.33 and see if this makes any difference. Also , collect the SIP debugs with NAT debugs "denug nat 5" Thanks and Regards., Vibhor Amrodia ... View more

Hi, Yes , to clear the complete configuration , you would need the "wr erase" command as that will clear the startup configuration. Also , what is the difference you see in the packet tracer in the two models ? Can you list some for me ? Thanks and Regards, Vibhor Amrodia ... View more