Activity in Security
Problems with SNMP on the ASA 5555-X
Hello everyone,I have a CISCO ASA 5555-X configured in multi-context mode and I want to monitor it via SNMP.However, I can't find the MIB files for this device.How can I get them?I don't have access to ftp://ftp.cisco.com/pub/mibs/supportlists/asa/as...
Setting UP a SECOND ASA5506-x firewall
Hello, I successfully set up/configured my first ASA device. I just purchased as second 5506 and am wondering about how compatible or incompatible the bkup configuration files I’ve saved from the first device are gonna be with the second ASA. It ment...
Cisco FPR 7.2.5 ACP filter user per AD/LDAP users
Hello , I have cisco FPR 7.2.5 managed by FMC. i want to make ACP rule and filter group user from AD/LDAP. For example one group from AD have FULL internet access other is Limited Internet access. Can i make it without ISE, ISE-PIC. It is enough onl...
Renewall of Admin Certificate
I have to renew the admin certificate in a pair of ISE nodes (Prim / Sec) on Version 3.2.0.542 Patch 4. Currently both devices have the same admin cert that expires in little over 3 weeks. All the names and IPs in this thread are placeholders. I gene...
Installing Secure Client (5.x) AND Any Connect (4.x) on 1 computer
I have a weird situation I need to connect to two sepaate VPN (not at the same time).One of these requires Cisco Secure Client 5.x the second works with Any Connect 4.x.I have Cisco Secure Client 5.x installed, if i try connecting to the VPN that use...
Recommended logs that should be sent to IBM QRADAR SIEM from ESA
Any thoughts on recommended logs that should be sent to QRADAR SIEM ? what subscriptions should be configured ?
Resolved! FMC 7.2.5.1: Smart Agent is not registered with Smart Licensing Cloud
Hello everybody,the customer has the FMC rel. 7.2.5.1 and the Health Monitor shows the error messageSmart License MonitorSmart Agent is not registered with Smart Licensing CloudSmart License usage is out of compliancethis time for itself (see attache...
SSM ON-Prem TACACS+ and Clearpass
Hi,I am trying to configure TACACS+ on our SSM On-Prem server so that I am able to login on the Webinterface with my AD user. The TACACS+ configuration is done in Clearpass. And the test in the configuration window on the SSM server was successful.Bu...
How to Manage MAC Address Randomization in Dual SSID BYOD ISE 3.3?
Context: I am currently testing a BYOD setup involving dual SSIDs using Cisco ISE 3.3 for mobile devices. The configuration process begins with an open SSID, followed by a secure SSID connection via TLS once the profile and certificate are retrieved ...
IPSec VPN Tunnel Lan-to-Lan decrypt count zero
Hi, I have one issue with IPSec tunnel Lan-to-Lan between ASA 5525x (v9.8) and ASA FPR 2110 (v9.16). My Tunnel is up but ping between each client was not successful. Both peer status sh cry isakmp sa in "MM_ACTIVE".I ran packet-tracer icmp between pe...
Cisco AnyConnect Umbrella Roaming Security Module
Hi,So was reading up a lot on the difference between the Cisco Anyconnect Roaming Module vs the Umbrella Roaming,Its clear that best practice is the Cisco anyconnect option as UR is EOL in a few months, so we recently deployed the new client company ...
Resolved! Cisco Firepower Malware signature
Hi there,Is Cisco Firepower have a Database for malware signature?When i check TECSEC-2599.pdf p77, the information is: FTD will first calculation the sha, and than send to FMC and FMC will check the Reputation from AMP Cloud.But i got another inform...
AnyConnect Speed Issues
Hello,FTD's 2110 at 7.3.1.1.I have two datacenters running that code on 2110s. They have the same configuration for the most part and the same size fiber internet 500 Mbps circuit. Coming in on VPN1, running a speed test from my home connection is ab...
Site-to-Site IPSec with VTI - Initial delay up to 60 seconds
Hello,I have an IKEv2 Site-to-Site IPSec tunnel (VTI with static routing) between ASA firewall and 2 stateless HA routers configured with HSRP (IPSec end point is HSRP VIP hosted on the HSRP active router).Despite the fact it is not stateful (not sup...
FMC displays old release even if the patch installation was successful
Hello everybody,our customer has FMCv rel. 7.2.5.1 and two Firepower 1120 in a HA running rel. 7.2.5.I have installed the FTD patch to rel. 7.2.5.1 successfully but the release that the FMCindicates is still 7.2.5 (see attached screen dump).Do you ha...
| User | Helpful Count |
|---|---|
| 44 | |
| 43 | |
| 33 | |
| 22 | |
| 20 |
