Network Security

Migrating from ASA SM to ASA Instance on Firepower

My existing setup has a ASA SM on 6500 which is EOL.I now have a Firepower4120s pair with ASA instances on it. What is the best method to migrate ? Can we use Migration tool in this case ? Or should I configure from the scratch for the new devices.....

Guest network 1941

Hy I have a question regarding a SOHO. So I have a network , that has 1 1941 Router, 1 2960 Switch, a Level3 Dlink and TPLINK Switch and a couple of wireless ap and my question is this How can I create a separate network for my guests to connect wire...

Resolved! C2960 IP phone and 802.1x enable

Dear All, I would like to know if there any way to implement 802.1x authentication for the VOIP Phone and PC at the same time? My current infrastructure is, Avaya Phone: 1603 and 1608,I have voice VLAN for the phone and Prod VLAN for the pc.radius-s...

Resolved! Cisco FMC Term Subscription

Hi, I have just purchased a term subscription for my FMC. The question is do I need to reboot after applying the key in order for the term to take effect? And since I have HA FP8350 controlled under my FMC do I need to reboot them too? Or just the FM...

Resolved! Cisco ASA 5506-X PAT to interface problem

Hi people,I hope somebody can help me. I don't know what to do =(Cisco ASA5506-X (9.9(2)36)I have 3 outside interfaces: two for internet (security level 0) and third one (name 'bft', security level 10, but I tried set 0 as well) connected to corporat...

ASA 9.12 and 9.13 nat problem! please help.

Hello.i have config on asa 5525-x v9.10.2 and before it. Config working fine!!! when I updated to the 9.12.2 or 9.13.1 version, an error appeared. Line 2 can not be added. "ERROR: NAT unable to reserve ports"Why is this not working? Not working on a...

ASA5506-x public server - Flow is denied by configured rule -

Hello all, New to the forums and the Cisco ASA 5506-X.I have tried to create a Public Server usingASDM --> Configuration --> Firewall --> Public Server I had no errors in the creation phase.I then tried to test using the command: packet-tracer input...

What is ASA NAT Control.

What is NAT Control in ASA?i think it was used in older versions of ASA. but why?, and what was the work of NAT Control.

Resolved! Does ASAv come with Anyconnect Licenses?

I purchased VIRL but the ASAv appliance doesn't have any .pkg files loaded for Anyconnect. I do have the ability to download the files directly from Cisco but I want to make sure I'm not going to run into a license issue. Does VIRL or the ASAv give m...

ASA5516 Firepower License

Hi Guys,This may be a silly question to most of you.I have a set of 2 ASA5516-x that is running Firepower Services.I received an alert recently stating that the "ASA 5516 Threat Defense URL filtering" term license has expired on the devices.Looking a...

Resolved! FirePower Appliance Placement

I have a FirePower 8k series appliance that is tied together with ISE pxGrid. Currently, the FP is setup with 2 ports inline on the outside of the firewall(ASA). I have a SPAN on the inside of the firewall that sends trafic to another port on the F...

ASA issue: DHCP Server Does not Lease Ip to Remote VPN Site

HI all, I am in a bit of a pickle. I have DHCP server that can 1. Lease IPs to devices in the same LAN2. Can also be pinged (reachable) within the same LAN, However the same dhcp server cannot do the above 2 things to remote site VPN. My setup in su...

Intrusion policy, Policy out-of-date on device

Hello! I use ASDM to manage Firepower on ASA 5506-X. I just found that in Configuration > ASA FirePOWER Configuration > Policies > Intrusion Policy > Intrusion Policy my policy is always shown as Policy out-of-date on device. I tried to change it...

Cisco Software Manager

Hello All, I have recently applied Smart licenses to the FTDs through the Cisco Software Manager,( the FTD is managed by FMC ) the licenses are applied but from the Software Manager Portal still shows that the Licenses are unused, when i did some re...