in the ISE distribution deployment we install the PAN persona in the Main site and PSN persona in the remote site the MS AD Main domain installed in the main site and we installed a tree branch of the AD on the remote site 1- I need to integrate th...
I'm looking for documentation on using the Orbital API to run Orbital scripts. I find plenty of documentation on querying the Orbital API, but I'm not finding anything on using the new Orbital scripts feature. I see some indications that it may be ...
Extended Detection and Response (XDR) - Versus - Security information and event management (SIEM). After the acquisition of Splunk as a SIEM and the launch of Cisco XDR, which one is better for detection and response?
Hello , I have cisco FPR 7.2.5 managed by FMC. i want to make ACP rule and filter group user from AD/LDAP. For example one group from AD have FULL internet access other is Limited Internet access. Can i make it without ISE, ISE-PIC. It is enough onl...
Is there some site that can indicate is the above SIRT affects Meraki MX's and what version of code it may have been fixed in? I am not finding this anywhere. customer had a Security company do a PEN Test and they point to this vulnerability as a H...
Hi, Can anyone suggest All the steps to create (TG) certificate requires to add TG with FMC. I have followed the link and Create The Certificate's using openssl but When it comes to FMC CERT it FAIL to integrate. https://www.cisco.com/c/en/us/support...
I have seen scripts to restrict emails to specific domains, https://community.cisco.com/t5/security-knowledge-base/ise-sponsor-portal-create-known-accounts-page-customization/ta-p/3636414 is there a script to enhance this based on Guest type: Contrac...
Hi members,Our deployment is a medium deployment with PAN+MNT personas sharing the same hardware. Deployment is enabled with "PAN Auto Failover".I want to reboot the original PPAN due to resource issues after promoting the SPAN as the new PPAN. Do I ...
Hello. The enterprise bought the virtual FMC appliance a few years ago. We haven't used it in 2 years. We have a new environment, and want to use the virtual FMC appliance. Does the previous purchase grant us access to the latest model? QUESTIONS: Do...
I am trying to renew a system Certificate on ISE. This is a CA cert for the Admin, Portal, EAP Authentication, and RADIUS DTLS roles. First I generated a CSR using the generator on ISE. When we try to bind the new cert using the option on the CSR ...
Hello Community! We have a Cisco Firepower Management Center and we integrated it with Tenable to send the vulnerabilities to the FMC. we followed the steps for integration from this link https://github.com/QuiLoxx/ATS-APIs/tree/master/firepower/ne...
Hi Everyone,We got ASA 5545 FWs in production (Active-Passive). Current FWs are End of Support. Cisco has sent another set FWs to replace the existing ones.Need action plane to do this activity with steps with minimal downtime.Current FWs Details:ASA...
Hello Cisco community,I am reaching out today to express my deep concern and frustration regarding the current state of blocking malicious and fraudulent crypto phishing websites through OpenDNS.I have diligently reported numerous crypto phishing web...
Hello all, I've setup a new distributed deployment with dedicated PAN, maintenance and policy nodes today. I've got radius & tacacs auth and authorisation working but there are no logs - live logs also in operations menu nothing is appearing. The dep...
Hello All,Our current integration for our Cisco Cloud Analytics (StealthWatch) uses Meraki traffic with protocol 'netflow'. We have Palo-Alto's appliances as North-South and East-West network traffic monitoring. I was curious if there is some integra...
