hello everyone, what would you recommend in terms of securing branch offices that directly connect to the internet instead of backhauling via the head office? We have over 90 offices all connected over Dmvpn. Each office goes out to the internet dir...
Forum Posts
Hi, I'm trying to find the serial number of Cisco devices using SNMP. I tried OIDs 1.3.6.1.2.1.47.1.1.1.1.11.1, 1.3.6.1.4.1.9.5.1.2.19, 1.3.6.1.4.1.711.2.1.1.2, 1.3.6.1.4.1.9.3.6. But, none of those gives me a correct serial number. Is there any othe...
Dear All, Does anybody know if admin context, configured in routed mode but with transparent user contexts, with access to a dedicated physical management port can send syslog messages for other contexts as well?The problem is I can't use inband sysl...
Hi I want to do split tunnel in anyconnect vpn. All traffic should go via tunnel except zoom meeting and it should go via local internet
Is this considered a major upgrade or minor? I need to upgrade my Active / Standby Failover pair with 0 downtime. I will upgrade standby and reboot, when it comes up with 9.9 code, will it break the failover with 9.8(4)3 or stay in failover with erro...
It might look like a weird question, but i actually have a experimental case for this one.Pretty simple:1. Let's say i permit tcp/443 from anyone on the outside to PC01.2. Now i want to block specific traffic on the way back, so on the Inside to a sp...
We have ASA's in every office as the egress firewall for the Internet. We only allow 80/443 outbound but we receive many requests from staff to access client sites that include a random port (ex. www.xyz.com:8080) so we have to add a firewall rule ea...
Resolved! Prioritize VoIP on ASA
Hi, We have an ASA 5515 connected to the ISP router. Being a call center I wanted to prioritize VoIP traffic. First of all is there a need to do this. We have comcast pipe of 50Mbps which is more than enough. I had the firewall set up 2 weeks ago an...
Does the Sec Plus license include these three subscriptions ( IP, AMP, URL Filter) ? Also can thee license L-ASA5506-SEC-PL ASA 5506 Security Plus - be applied to any of these ASA PART#s: ASA5506W-A-K9 or ASA5506-X or ASA5506H ? Thanks!
Hello , We seen the both FPR2110 becomes active-active suddenly.it was working fine in active-standby fail-over. we have used direct ethrenet cable for cross/sync link between to firewall. FPR2110 IS MANAGED BY fmc. Also seen the CPU utilization pri...
Resolved! Cisco FirePower 4110 Fail to boot
I have this FirePower that continously power cycles am not sure what has failed I have tried software recovery but which worked but after reboot, It still power Cycled.I cleaned the the file system as per cisco documentation with init system command ...
Hello Team, Today I working with Cisco TAC on SSL Decryption with SafeSearch. We did not apply the SSL Policy to our SafeSearch policy that was created with the fear of disrupting internet access. In the past when I applied the SSL Policy it would bl...
Good Day, I have a situation where I am using ASA in a non-standard way. I have run into behavior that I do not understand and hope that someone can explain to me. This is a sample topology of what I am dealing with: The "dmz" interface is not a rea...
I was able to setup my Cisco ASA5540 for Internet access from inside servers to the outside (i.e., I can hit websites, and ping hosts to the outside, and I can ping the inside hosts at their IPs from the firewall), but I cannot figure out how to allo...
