We are currently replacing our ASA with a Firepower 1010. When configuring the VPN we ran into an issue using a 3rd party certificate when trying to authorize SAML SSO with Azure. TAC suggested we update from 7.2 to 7.3. When updating the device we g...
Forum Posts
We have two Firepower FTD boxes that showed a 10x syslog log increase starting late last week. The first box went from 18million logs per day to 180million. Then 2 days later a 2nd box in a different datacenter went from 19 million to over 200 mill...
Hello everybody,yesterday I tried to to upgrade Firepower module in a ASA5508 (rel. 9.16(4) from 6.7.0 to 7.0.6.The FMC is running rel. 7.2.5.1.There were no open deployments and the Readiness Check was successful.After more than one hour I just got ...
Hi,I am trying to create a user test with privlage level 3 with the permission only to see show running-config. Commands are as below. LIMS#conf tEnter configuration commands, one per line. End with CNTL/Z.LIMS(config)#privilege exec level 3 show r...
Hello!I downloaded Cisco_Secure_FW_Mgmt_Center_Virtual300_VMware-7.2.5-208.tar.gz. After downloading I checked MD5 Checksum and SHA512 Checksum. Checksum from Details in the site cisco.com for Cisco_Secure_FW_Mgmt_Center_Virtual300_VMware-7.2.5-208.t...
Resolved! Cisco ISE v3 ISO running on VMware
Hi guy'sI'm trying to run Cisco ISE.iso on VMware although I'm changing process number it doesn't work how to fix this issue my real Physical Process 4 cores and logical process 8.what is the solution i need ISE to practice any solution ?
Resolved! NAT ASA Mapped to Real Port
I am having a hard time with getting Nat to work from external mapped port to real port. I simply cannot remember how to do this on the AS via ASDM can someone review my screenshots and let me know what I am doing wrong here???I am trying to get Outs...
Resolved! ASA5550: inside host can't ping internet
I'm trying to put an ASA5550 between my ISP's modem and my internal network (just my laptop, to start with). From the ASA console, I can ping out to the internet (e.g. 8.8.8.8), but not from the laptop. My laptop can't even ping the ISP gateway, th...
Hi, I am trying to filter based on subnet under event logging on CDO for our cloud delivered FMC. All I see is InitiatorIP or ResponderIP that I can use as my filters. Is there a way to filter based on subnets? like source/destination subnet? I Dont ...
Hi Guys,I'm trying to configure a view that will allow a user access to do a few mundane tasks such as read the startup conifg, a few show commands, change the terminal settings, etc.I've configure a view called RO and assigned a few exec commands (s...
I am running frp9300 inter-chassis cluster and I have a FMC HA running. When i am trying to register the logical FTD it connects to primary FMC fine but doesn't register under secondary FMC as its on a different subset. FTD Br1: 192.168.1.2GW:192.168...
Hi, Is it feasible to have my FMC in HA but with different subnet? If yes, how will the FTD synchronize to the standby FMC when the primary FMC goes down? Thank you
there is a bug that makes my company's ASA 5516x suddenly stop responding, its powered on and lights going off and on like its operational but nothing is responding no data going through, no access ssh nor console is working (its like your PC on and ...
Hello! I have this confusion about FTD regarding actions in ACP and PREFILTER... Starting from the idea that:In ACP action Trust= bypass any inspection/snort and is permitedIn ACP action allow= permit but is passed to inspection/snort for further ana...
hello experts , we have ASA 5525 and want to send and receive the emails from internet and use behind the asa on-prem DNS server and on-prem Microsoft exchange server with the below map exchanger server internal IP 192.160.10.5 Domain controller in...
