aaa new-modelaaa local authentication attempts max-fail 6aaa group server tacacs+ ISE_GROUPserver name TACACS_ISE_SPserver name TACACS_ISE_PDserver name TACACS_ISE_PRserver name TACACS_ISE_PUNEaaa authentication fail-message ^CCCCCCCCCCCLogin attempt...
Forum Posts
Resolved! FirePower 1010
After trying to reset to factory settings, the device stopped booting.The ROMmon menu loads, in which I try to do a factory-reset, and after the boot command it displaysmedia drive disk0: not presentboot: cannot determine first file name on device "d...
Resolved! Make ASA debug commands persistent
Hello community, I refer to this (quite old) discussion and this answer which is not that old... But I have an ASA with software version 9.9(2)80. I would like to send debug messages via syslog even after ssh logout. The answer tells that one should ...
Hi All Apologies if question is vague - very much a Voice / Router / Switch engineer - Im just delving into security area recenlty With regards to the below vulnerabililty alert https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurity...
Hello team, I am new to Cisco ACI World and I have been asked to integrate Fortigate FWs in HA with the ACI factory. Reviewing the equipment's Datasheet, it comes with 6 QSFP ports to make connection with the ACI factory, but could you tell me, accor...
We need to be able to stipulate the criteria for what is an acceptable password. The VG450 runs IOS XE systems support this with the following command: aaa common-criteria policy PASSWORD_POLICYmin-length 15max-length 127numeric-count 1upper-case 1lo...
ASA v8.03: I've noticed that if I turn on various debug commands (eg: "debug crypto isakmp sa"), they seem to be automatically turned off when I exit my SSH session. Is there any way to keep them persistent between sessions? Cisco routers (IOS) kee...
Hi Background story: I have a customer that are deploying over 900 FTD in CDO and i have a python program that configure and deploy the configuration to each device I have a program that make a bunch of configuration changes using the Cloud delivered...
Resolved! FTD Quality of Service
hi Ciscohave configured QoS on our FTD appliance but only some dashboard 3/6 are not showing appreciate your assistance as to why below are not showing..on some dashboard which parameters need populating so that the data is revealed on the DashBoardT...
Hello, We have a ASA 5225-X H/A pair with SFR modules. Within a month of time both modules have crashed and I'm trying to figure out if this is a physical issue with the SSD disk or just a corrupt filesystem. We have tried re-image the modules, but w...
Hello,I have a cluster of two firepower 3120 in high availability (active/stanby).It's managed by FMC.Everything is running in version 7.3.0.For now, an ECMP zone is configured and load balance the trafic between my two ISP, which both have a bandwid...
Moring/Afternoon/Evening allBeen given a Firepower 1010 to setup and we are going to be using it with Cisco Defense Orchestrator but i'm having issues with the device being seen by CDO.This is likely going to be something simple but i've been looking...
after upgrade, i got the same error as in this BUG, I deregistered and registered again but the same license error The workaround says: 1. vim into the file /etc/sf/.health_monitor.data and delete the following line. IDCERTEXPERR:2 admin@FMC1...
Dear Community,We are trying to get Radius authentication to work for one of our ASA´s.It is working for every ASA except ASA1.following structure is given:ASA1:GigabitEthernet0/1nameif transfer-ASA1-ASA2security-level 10ip address 194.1.1.1 255.255....
This is a site-to-site IPSEC tunnel. Everything looks good, including the packet capture but the packets aren't seen on the far end on their packet capture (the other company on the other side of the tunnel). Both sides are using Cisco FTD's. How ...
