hi every one ,i want to configure NAT over loadi have one public ip address 37.x.x.xand pool of private ip addresses 70.70.x.xwhen i configure natting by typingnat (inside,outside) soure (static or dynamic) ,there is no PAT configuration ,because i w...
Forum Posts
Hello I have a configuration HA FW ASA5525 CLI and i want to paste this configuration to HA FW 4112 CISCO. Problem : my question : I make the HA cablage connection for two FW 4112 and then I copy this configuration CLI or i copy configuration...
I have a brand new Cisco ASA 5506-X that I want to setup so I need the correct licenese for Advanced Malware Protection (AMP) and URL Filtering? I guess this is correct ? L-ASA5506-TAMC-1Y CDW $373 ???Since I already have a basic Unifi network (USG...
When commissioning the two new Windows VMs. We have a problem with the deploymentThere, the servers to be installed can not reach the DNS server and it looks as if it does not go on in your customer network.It seems traffic needs to be allow from Fir...
Hi Guys,I have an ASA with Firepower Services with the use of ASDM to manage it and I tried to create a custom privilege user account. When I tried to use the "admin" account, everything is okay ASDM can login to ASA and Firepower using the ASDM howe...
Hello.On an enterprise ASA There exists at least 1 active outside int with a public IP address, that has zero restrictions on its attached ACL. I expect this interface is not advertised at all, but still, is this normal (if not best) security practic...
I'm new to the Firepower FR-1010. What is the best way to monitor/analyze the inbound traffic going outbound to the internet. I would like to start explicitly defining the outbound traffic that can leave, but need to know what is being used so I can ...
Hello,For some time now we have been experiencing an issue on the network for a while. I haven't been able to figure it out.When downloading a large file (usually 500 mb or higher) the download starts strong, then slows down, coming to a complete sto...
I am managing a Cisco FPR-1120 with FMC, not using the data interface, but through the Management Interface then recently for some unknown reason, I am no longer able to ssh to the device. Management through the FMC still works fine, and can ping it...
Hi,I have one question about some licences.Specifically these ones:R-MGMT3X-N-K9L-MGMT3X-PI-BASEL-MGMT3X-2K-K9R-PI36-SW-K9L-MGMT3X-3K-K9L-MGMT3X-4K-K9My question is if these licences are portable or not.For example: I'm buying new server, does I need...
I am trying to setup a firewall in Packet Tracer but all connections leading out of it are red. All the videos out there show the connection turn yellow then to green but they remain red for me. I am new to this, I don't understand what I'm doing wro...
Hello Cisco Community,I am trying to allow port 80 through a ASA 5506 firewall from my DMZ to a INTERNAL zone for a HTTP server. I am having a problem with the access list, and have encountered a strange problem. The ip address of my HTTP server is 1...
Resolved! ASDM authenticate fails now
Hello, I need some help getting my ASDM working again.For some reason when I try used ASDM I can't get pass the authenticate part. When I try to ssh to the same firewall using the same username and password worked fine no issue.ASDM version 712-102 A...
We've had LDAP integration into our AD for many years for authentication into the FMC and FTD. However, we're trying to setup a rule, so that someone in our finance department is the only one who can get access to a particular website. When I configu...
Resolved! FP sizing for 2000 active connections
I have a question about FP sizing.For a site that has approximately 2000 active connections through an ASA5506x (not running any firepower just classic ASA, output of "show conn") would a FP1010 be powerful enough to run all three FTD licenses?
