I have an existing failover pair of two ASA5545-Xs. I want to add Firepower to them. They don't have SSDs. First to add SSDs to them, do I need two ASA5500X-SSD120=  ? One per device? Or do I need two per device (so four in total)?  Second to add Firepower (Just the IPS and Apps), is the part number: L-ASA5545-TA= ? And I need one per device? Any other licensing or part numbers?  ... View more

I have a failover pair of Cisco ASA5545-X firewalls and I would like to upgrade these firewalls to add firepower. I can't tell whether these ASA5545-Xs have SSDs or not though.  device# show module Mod Card Type Model Serial No. ---- -------------------------------------------- ------------------ ----------- 0 ASA 5545-X with SW, 8 GE Data, 1 GE Mgmt ASA5545 FCH1724JXXX ips ASA 5545-X IPS Security Services Processor ASA5545-IPS FCH1724JXXX cxsc Unknown N/A FCH1724J6FG Mod MAC Address Range Hw Version Fw Version Sw Version ---- --------------------------------- ------------ ------------ --------------- 0 4c00.82ad.b627 to 4c00.82ad.b620 1.0 2.1(9)8 9.1(6)4 ips 4c00.82ad.b625 to 4c00.82ad.b625 N/A N/A 7.2(1)E4 cxsc 4c00.82ad.b625 to 4c00.82ad.b625 N/A N/A Mod SSM Application Name Status SSM Application Version ---- ------------------------------ ---------------- -------------------------- ips IPS Up 7.2(1)E4 cxsc Unknown No Image Present Not Applicable Mod Status Data Plane Status Compatibility ---- ------------------ --------------------- ------------- 0 Up Sys Not Applicable ips Up Up cxsc Unresponsive Not Applicable Mod License Name License Status Time Remaining ---- -------------- --------------- --------------- ips IPS Module Enabled perpetual device# Do they have SSDs in them?  ... View more

What is the impact if the PFR Hub Master Controller experiences an outage?  Does it mean that I can't make any changes to policies but the network will continue to function as per normal? Or does it mean that none of the routing will change if there is an issue? For example, if my PFR Hub Master Controller goes down, then if an internet link on a BR experiences an outage (for example, the latency goes above thresholds) does the traffic faillover to another link? Or will it not act upon the policy?  ... View more

I'm trying to do a new Cisco IWAN setup. I'm trying to imagine how it would look with how the new I'm using is configured. I'll keep it single, here would be the physical setup: http://i.imgur.com/CLuQpUa.png . It's odd because we have one site that has terrible connectivity from ISPs (it's in the middle of no where). Thus we have 3 x ADSL links going to it to get the bandwidth it needs. I want to eventually use Cisco IWAN and PFR to load balance across these 3 links back to the datacenter. To setup a DMVPN that can I load balance across (e.g all 3 ADSL links are always active), would I try and configure a single DMVPN and then have three tunnel interfaces somehow point into it? Like this http://i.imgur.com/6ANON1h.png If so, how would I setup the tunnel interfaces? Or would I try and have 3 different DMVPNs configured like this: http://i.imgur.com/1s0g0th.png . If so, would I just create three tunnel interfaces on the Hub and Regular Site Spoke routers and have them share the same tunnel source? ... View more

I have an ASA5585-X with Multiple Contexts configured on it. Since converting the ASA to Multiple Context mode, it now no longer logs user authentication messages (%ASA-6-113004, %ASA-6-611101, %ASA-6-605005). How do I get it to log again?  Here is the logging configuration within the ASA context:  ASA/context# show run | i logg logging enable logging timestamp logging buffer-size 16384 logging console informational logging monitor informational logging buffered informational logging trap informational logging history informational logging asdm informational logging queue 2000 logging host Inside 10.1.1.1 It's using the following software version: ASA/context# show ver Cisco Adaptive Security Appliance Software Version 9.1(6)11 <context> Device Manager Version 7.3(3) ... View more

We've got a wireless network set up already and we're getting a Cisco ISE for this project. We're investigating deploying two factor authentication, with the two factors being: Domain Username/Password and a Certificate.    Is the only way to do two factor authentication like this with EAP-Chaining?   Will EAP-Chaining work on Android and Apple IOS devices?    ... View more

I'm having issues with getting SIP and RTP traffic through a Cisco ASA with NAT enabled. Diagram of issue: http://i.imgur.com/Ymwl7Xm.jpg Now, when we enable the SIP inspection on the ASA, the SIP messages are generated by "SIP CLIENT" and when generating a "200 OK" as part of the registration process, it adds two "via" headers to it. The first via header field is an IP I don't know, the second via header is the SIP servers IP. As this 200 OK goes through the ASA the ASA decides the second Via header field needs to be replaced with it's IP, which it then forwards to the SIP server. The SIP server sends it back, the ASA sends it back, etc until a huge loop has been completed. (This is confusing to explain so please see this for further explanation: http://i.imgur.com/ngl4MGF.jpg) My question so far is, is this a bug? Default behaviour? Anyway to disable this part of the SIP inspection? When we disable SIP inspection, we can get the SIP CLIENT registered and it can make a phone call but we get no audio (RTP). Is there a way of making this work? Or does it require SIP inspection? ... View more

Hi, I have an 1811 here. Whenever I plug a power cable into it, it sounds like it starts the boot phase and the fans start whirling, after 3 - 5 seconds it beings quietening down like normal, then after about 1 - 2 seconds of quiet it begins whiling the fans again. It just goes around and around in this loop. I don't have a console cable on me but I assume the console won't show anything (Correct me if I'm wrong). I've taken the flash card out incase its that, still does the same (I assume if it was the flash card it would now correctly boot into rommon and not whirl loop). Any takers? Cheers ... View more