About Rob Ingram

Rob Ingram · 03-03-2024

Any ThousandEyes training or certifications planned?

Rob Ingram · 11-09-2026

@balorfinn9 moving to wireless forum

Rob Ingram · 11-08-2026

@Tecnico F ZBFW is supported on IOS or IOS-XE, ZBFW is old and CBAC is even older, ZBFW replaced CBAC, so I would recommend using ZBFW. If Network A and Network B interfaces are configured as "ip nat inside", you don't need NAT exemption rules. You...

Rob Ingram · 11-08-2026

@Tecnico F the only real option for stateful firewall solution on IOS-XE is ZBFW, it is rarely used nowadays though. Edit. I believe if both internal interfaces are configured "ip nat inside" then they are not subject to NAT, traffic would only be tr...

Rob Ingram · 11-07-2026

@sethambros6 split tunnelling could tunnel only the sip and rdp networks and route internet traffic locally, but split tunnelling would be configured centrally on the firewall, so unless you are the firewall administrator you would not be able to do ...

Rob Ingram · 11-04-2026

@karamalomari do you mean FTD HA (Active/Standby) as opposed to a cluster? You add both devices to the FMC according to Registration with the management center then you can establish HA. Then create a policy and assign to the new FTD HA pair.

Member Since	‎12-05-2010 06:35 AM
Date Last Visited	‎10-23-2026 01:32 AM
Posts	11,381
Total Helpful Votes Received	17534

User Statistics

User Activity

Any ThousandEyes training or certifications planned?

Re: 9800-CL Controller and 1852 WPA3 issues

Re: Cisco IOS: Stateful inter-VLAN access with NAT and ACLs

Re: Cisco IOS: Stateful inter-VLAN access with NAT and ACLs

Re: Route only RDP and SIP connections through Cisco Secure Client?

Re: Adding new HA FTD cluster to an existing FMC