General Topics

Trouble establishing IPSec to Cisco ASR 1001X

I'm working with a business partner and we've verified phase 1, phase 2 parameters. But this is what I'm seeing in logging after running test vpn ike-sa gateway:

2019-02-26 09:57:21.638 -0800 [PERR]: { 43: }: 77.77.236.54[500] - 207.99.97.218[500]:(n

How Set Up the VM-Series Firewall on XenServer?

Hello, everybody.

I purchased the Vm-300 virtual firewall.

I have installed XenServer 7.1 servers

I would like to install version 8.0+ of the firewall on this virtualization platform.

I have downloaded the OVA extension file, but the import of the virt

tls1.3 and required action?

I know I am late in posting about tls1.3.

I have my permiter 5020s doing inbound and outbound ssl decryption. I'm currently on 8.0.13 and never had any issues. with tls1.3 coming this March, should I fear of breaking ssl connections and upgrade to lat

Security Policy Application

Hello everyone,

I'm hoping someone can help me understand why a security policy is not applying the way I thought it should. Here's what I have:

I have each of our schools configured on different DHCP scopes. I then created an Address Object using sla

Destination nat not working.

I have security policy untrust -trust(webserver publicip) and nat policy - untrust -untrust.

Wheni try to access web server public ip it is not hitting the security policy and is considering the destination in untrust zone

and denies the traffic.

Pa200

Default Application ID change in 8.0?

We are migrating from some 200's running 7.1.x code to 220's running 8.0.x code. We had a rule that was working fine, allowing any traffic from a server to another server. We didn't define any apps or tcp ports. We have that rule in the new firewall,

Split DNS

Hello

We would really like to see a "split DNS" configuration for Global Protect, where you can specify certain domains that are sent to the internal DNS Server (or DNS Proxy), and all other domains get handled by the user's normal DNS servers.

Thank

Issue with WLC Radius request to NPS Server

Hi all,

I have an issue with the radius request through the firewall,

The radius request come from an cisco 1852-ME WLC and goes to an Windows 2016 NPS Server, both in different zones.

An simular setup with an firewall works fine.

The NPS Server does not

ecmp

Hi community,

Does anybody clarify my following doubts about preferred path in ECMP.

I am able to see * mark in one of ECMP route ?. what is that means?.

I have balanced round robin, so that each new sessions should take one path alternatively right ?