About Thomas Winther

Thomas Winther · 07-03-2017

Hi I have a group of dynamic objects defined by FQDN in mulitple ASA 5506/8-X. Somehow after ugrading ASA software from version 9.6(1) to anything later, the DNS resolver fails. Same config, nothing changed. My remote sites are doing IKEv2 site-to-si...

Thomas Winther · 01-06-2017

I have some 5508X HA setups in PoCs, and I recently realized that I can't manage the standby device via ASDM, through an active IPSEC tunnel.That's an ASA classic issue, but it is a challenge for my ability to manual(huh) synchronize the Firepower co...

Thomas Winther · 05-26-2016

Hello Is it possible in the above setup, to let Server A in site A send a directed broadcast to vlan 20 subnet in site B ? What is the configuration needed to let this happen? I've tried to enable the ip directed-broadcast command on all the L3 int...

Thomas Winther · 09-15-2015

Hi there,When FirePOWER is blocking SSL/TLS sites it would be preferable to see a response page, like with the HTTP pages.Is that possible? I guess it is with the enabling of SSL inspection?Any good guidance? Kind regardsThomas Winther

Thomas Winther · 07-06-2015

I have a few Access Rules where I want to apply a file policy for hits on specific applications.When I try that, I get the following Rule Warning:"File policy rule targeting application protocol "Any" may never be triggered due to Application selecti...

Thomas Winther · 01-15-2017

OK, for the configuration synchronization i need FMC. But.., my setup is still ASA HA remote units, and I'm unable to manage the standby device via the IPSEC tunnel from HQ. So would FMC be I think? Do you know how the standby unit can be managed beh...

Thomas Winther · 12-28-2016

So a stand-alone ASA-X could, in "traffic-forward sfr monitor-only"-mode, provide the visibility for Users/applications/traffic rates/URLs, that we do not get from the classic ASA? Can the Firepower module forward all that info by Syslog to my extern...

Thomas Winther · 06-01-2016

you have established that the directed broadcast is propagated onto vlan 20 I'm not sure...I'm not able to capture any broadcasts in Server B, when pinging or probing the Site B directed broadcast address from server A. Server A is getting sporadic...

Thomas Winther · 05-31-2016

The vlan20-SVI has all 1's in broadcast address(default): sh ip int vlan20Vlan20 is up, line protocol is up Internet address is 192.168.20.240/24 Broadcast address is 255.255.255.255... Should I set this to 192.168.20.255 ?

Thomas Winther · 05-31-2016

From Server A, can you ping Switch B's VLAN20-SVI and Server B's IP address as well? Yes I can ping Switch B's vlan20-SVI from Server A with success. And Server B's IP as well. And from Switch B, does Server B reply when you ping 192.168.20.255? ...

Member Since	‎08-23-2010 08:49 AM
Date Last Visited	‎11-03-2022 03:13 AM
Posts	21

User Statistics

User Activity

ASA 550x-X DNS resolving of FQDN-objects stopped working after ASA upgrade from 9.6(1)

Export/import Firepower config from Active to Standby ASA in HA setup?

ip directed-broadcast over GRE?

FirePOWER 'response page' for SSL/TLS sites being blocked?

File policy rule targeting application protocol "Any" may never be triggered due to Application selection

OK, for the configuration

So a stand-alone ASA-X could,

you have established that the

The vlan20-SVI has all 1's in

From Server A, can you ping