Hello,I have an IKEv2 Site-to-Site IPSec tunnel (VTI with static routing) between ASA firewall and 2 stateless HA routers configured with HSRP (IPSec end point is HSRP VIP hosted on the HSRP active router).Despite the fact it is not stateful (not sup...
How long will a message be available in the message tracking on the SMA?I cannot seem to find any information pertaining to this on Cisco's website. Thanks!
I have a weird situation I need to connect to two sepaate VPN (not at the same time).One of these requires Cisco Secure Client 5.x the second works with Any Connect 4.x.I have Cisco Secure Client 5.x installed, if i try connecting to the VPN that use...
Hi,on ISE 2.4 in the live logs pages the report that one got clicking on the repeat counter was very useful because the endpoints were sorted by repeat counters. So it was very easy to find the endpoints with high repeated counters.With ISE 3.2 the r...
Hello, Does anyone know why the FMC/FTD would create an sf-storage folder on a Linux Server? When I configured the remote storage I tried to point it so that the backups are stored into a certain directory, however it created a separate folder within...
Hi all, i wonder if (and if yes how) its possible to combine a WhiteList Entry Server AND Mailadress. For example - we want to be sure that some mail adresses from a specific Server are whitelisted. Other Mails from this Server should be blocked and ...
Hello,FTD's 2110 at 7.3.1.1.I have two datacenters running that code on 2110s. They have the same configuration for the most part and the same size fiber internet 500 Mbps circuit. Coming in on VPN1, running a speed test from my home connection is ab...
Hey allI have a Firepower 1010, I need to disable the SIP ALG on it, I have access to the Web Client and Telenet access to make changes, can someone give me an easy way to make these changes, I don't have the ASA Software that could access with.
Hello, I deployed a new FTD 2110 on our company network and I'm seeing two different mac addresses on the switch port that the MGMT interface is connected to. I know that the one mac address is associated with the actual MGMT interface, but can anyon...
Hello everybody,our customer has FMCv rel. 7.2.5.1 and two Firepower 1120 in a HA running rel. 7.2.5.I have installed the FTD patch to rel. 7.2.5.1 successfully but the release that the FMCindicates is still 7.2.5 (see attached screen dump).Do you ha...
Hello, I successfully set up/configured my first ASA device. I just purchased as second 5506 and am wondering about how compatible or incompatible the bkup configuration files I’ve saved from the first device are gonna be with the second ASA. It ment...
Hi Folks i have a doubt we have Cisco data security services enabled for upload inspection in our WSA and in that policy we have one URL custom category as passthrough and one identification profile is also configured and upload limit is 500 mb .so t...
Hello,A client is trying to SSH through the HTTP proxy (WSA), it works but the response times are huge.ssh_args = -C -o "ProxyCommand=nc -X connect -x proxy-http:8080 %h %p"It serves its purpose. HTTP proxy isn't designed for that, but has anyone tri...
Hi, Anyone able to guide through a few sizing numbers for S300v/S600v/S1000v? Currently under an incident that the 4 x S300v keeps crashing under a certain load and TAC believes it is the loading issue. However, they don't follow up with the rec...
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: