I tried introducing machine authentication function on ISE in order or separate authorization policy each for the person whose pc name is registered in AD and not. I know that we can use the attribute "Wasmachineauthorized" to realize my wish. Howev...
Forum Posts
Hello, I will be setting up vFMC 7.0 for the first time to configure my ASA 5555-X reimaged with FTD 6.6.5.I will eventually have a dedicated VPS for the FMC. However, at this stage I'm looking for a temporary setup that will allow me to get started ...
Hi Please see the below authentication session. For each Authentication rule under Authentication Policy, there are three options for the Status. I tried each of them, Enabled, Disabled and Monitor for client authentication. I could not find differen...
Resolved! Firepower 6.7.0 and Snort 3.0
Hi All, I am facing some issue after an upgrade from 6.6.0 to 6.7.0 for both my FMCv and FTDv. As per the release notes I should be able to switch to using Snort 3.0 after the update from the "Device > Updates page, in the Intrusion Rules group", but...
Resolved! ASA-5508-X and XBox Live
Hello So I was getting a lot of lag and ping lately. Whenever I run a PC test or a Connection test on the XB I get perfect speed and 20 or so ms ping.When I play on XB live or do the multiplayer test I get like 80-120 ms ping. Could be XBLive, but al...
Hi We have catalyst 9800 wlc with Corp, and Guest ssid. When client is connected to ssid Guest, on ISE, we can see ip address (192.168.1.10) which is from Guest ssid subnet dhcp. However, client changed ssid from Guest ssid to Corp ssid, we still can...
Hi We know Policy set is a container containing authentication and authorization rules etc. each authentication and authorization policy also has Conditions option for us to fill out, but Policy Set also has Condition option that we use to define. Ho...
We want to configure our newly purchased 2130 firewalls as inline firewall in transparent mode between internal coreand core switches in remote sites sharing same network subnet vlans. Kindly advise is transparent mode configurable directly on FW cli...
Hi, all. I'm working with a Firepower 2140 in platform mode, running an ASA image (9.14(1)10).The hardware has 64GB of RAM. The ASA image is only allocated 14,368,182,272 bytes. The ASA is currently running at 97% RAM utilization, and trying to con...
Resolved! Cannot register FTD to FMC
Hi All, I am having trouble registering a virtual FTD running on a 4415 chassis, to a physical FMC. I have checked the logs and can see: err 9:certificate is not yet valid and the FTD's time is showing as: > show timeUTC - Thu Apr 15 06:17:27 UTC 20...
Resolved! FPR 2120
Why am I not able to input commands in ths FPR 2120 How do I reset it so that i put new softwareMSC-FW-01# show run ^ % Invalid Command at '^' marker MSC-FW-01# show running-config ^ % Invalid Command at '^' marker MSC...
Hi i need to know how to upload a config to fpr 2120.I have connected to its mgmt port, i can get a dhcp ip but i cant ping it yet i need to access its GUI. how do i go about it
HI,My ASA 5520 is authenticatiing cisco anyconnect vpn clients.I want to authenticate user based upon mac address or device idis it possible.Kindly adviseThanks
We've deployed an FTDv in Azure which appears to be working okay and has internet access through the associated Azure public IP on the outside interface. The VM's only seem to work when the default routes are supplied via Azure and use the Azure Inte...
Hi All,I have a big problem.I am migrating a Cisco ASA 5545, to FTD 2130. ASA is containing 150 Tunnels of Site-2-Site VPNs.Migration tool version 2.4 support migration of tunnels but still it does not support ACLs migration that we have under 'vpn-f...
