Hello,I have been stuck for several days on an ISE authentication problem with SAML.Microsoft authentication works fine then the ISE redirects to google.com and it fails to change the authorization profile. As he does not have Internet access with th...
Hi all,I would like to ask how could I classify hosts automatically on StealthWatch 7.4.2 with domain datastore datastore.I tried the application hosts classifier, but the problem its not suitable for datastore. So, It did nothing.Do you have any sug...
i have 4 ASAv(ASA1v ASA11v ASA2v ASA22v). When I downloaded and installed ASDM from ASA1v, ASDM did not run automatically and there was no icon on desktop & window menu, but was able to uninstall in Control Panel. When I downloaded and installed ASDM...
Does anyone know where to find Cisco Secure Workload (Tetration) Training?? Is this product being abandoned?
Hi GuysI am completely new to Cisco Firepower and ISE. I am trying to assist a client with moving from DUO MFA to Azure MFA on Cisco VPN. The customer uses both Cisco Firepower and ISE in the environment.The question are:1) Can users be moved to Azur...
Hi All,We are migrating from ASA to FTD and planning to use migration tool, I came through that in 7.2 version of FMC and FTD even VPN(both site to site and AnyConnect VPN) configs will be auto-converted too. I am mostly concerned from ssl certifica...
Hi All,I have set up SSL decryption for most traffic with a few exceptions and it is working well, however when trying to sign in from Azure CLI i am getting the following error:HTTPSConnectionPool(host='login.microsoftonline.com', port=443): Max ret...
Hallo,I have a few C1100 routers that seem to have some UDP ports open. Unless I disable the protocols e.g. NTP, the port are as below after an nmap scan:123/udp open ntp161/udp open snmp500/udp open isakmpOur SP says that there is currecntly no r...
[Updated] Hello everyone, Case 1: I'm curious about the capabilities of a firewall that operates without a license. Additionally, do these capabilities vary between different firewall series when no license is present? --------- At CCW I've added thi...
Hello!I need a command with which I can check the OpenSSL version in IOS and IOS XE.For Catalyst switches and ASR routers.On my Nexus devices I either use the bash shell or I use the "ssh -v source-ip" command. Both of those aren't working for IOS / ...
Hello Everyone.I need the MIB and OID from FTD and FMC for monitoring them.Any one have a link to get the MIB and OID from FTD and FMC?Thank you.
Greetings everyone, We have recently upgraded our FMC and 2 managed FTDs from version 6.4.0.10 to version 7.0.5, and then migrated the IPS engine from Snort 2 to Snort 3. (upgrade and Snort 3 migration completed successfully). After Snort 3 migration...
I need secure-login in firepower chassis manager CLI How Can I avoid contact Cisco tac and get response of Challende String? I don't have contract Thank you Tom FP-MI-LAB# secure-login Challenge String (Please copy everything between the asterisk ...
The one Access Point Migrated is complaining: - "Uplink IP address in conflict with another device - " - indicating a duplicate IP Address AP MAC Address = e455.a82d.4048 IP address = 172.10.10.5 (handed out via the FTD DHCP pool). When we look at...
Hi!I am using a virtual FMC 6.4.0 in order to do a migration from ASA. As you know, once you migrate the ASA policy package it creates you a rule for each ACE which extremely increases the number of rules in the FMC (in my case up to 20.000 rules).Ok...
