Hi All, I'm currently having issue where the System Admin is having difficulty in getting internet access. A rule was created on the Cisco ASA to allow internet access to the Server but the System Admin is not getting internet access but when we do t...
Forum Posts
Over the past several months, I've noticed a lot of login attempts from Foreign IP addresses trying to log into my Exchange server. The server is fully patched but I would like to block these IP's at the firewall so that they simply can't try the lo...
My ISE cube is made up of two nodes. I just enabled device admin to manage a few switches/routers via TACACS and it is working as expected. However, I noticed the system clock in ISE is different to the one of the routers/switches and to that of the ...
Hi two terms is same? Network Admission Control (NAC) vs Network Access Control (NAC)Thanks
I believe that the statistics on the Cisco ASA are reset after a reload takes place but I was not able to find Cisco documentation to confirm this. Specifically looking at the "show vpn-sessiondb summary" statistics. Would anyone be able to confirm m...
I have a standalone NGFW 2110 with AnyConnect configured with there are several issues going on, and not sure if one is impacting the other. 1) Can't ping e1.7subif or e1/8 subif from the fw. However, e1/3 subif ping just fine. 2) When clients conne...
Resolved! Firepower module ASA planing upgrade
I am planing upgrade ASA sfr module 6.1.0 to 6.7.0.The ASA version is 9.6(2). During the planning, the following questions arose: Re-image and install the new version is different to perform an upgrade in ASA sfr module?In case a this re-image and in...
Hello, I am running FMCv for the first time on Hyper-V using the Microsoft Azure VM. The web interface prompted me to choose between registering the device with Cisco Smart License Manager or Start a 90-Day trial. I will select the 90-Day trial for n...
I see the logs like below on ISE .I turn on machine authentication, and AD is correctly working with ISE using PEAP.however, as shown, the machine authentication can not be processed.so the attribute "Network access> WasMahineAuthenticated " is meani...
On firepower 1140, I can't setup port-channel between sfp ports. FDM version was 6.4.0 I upgraded it to 7.0.0-94. On both versions it doesn't work.How I can solve it. I need very urgent solution on that.Thank you for your support
Resolved! IOS version Star
Hello All, I have a simple question. What are the risks of using the above-recommended version with a star? My client has FMC and FTD 4110 Firewalls in version 6.6.1.I know that Cisco currently recommends version 6.6.4.Due to BUG, I see that it needs...
We have a pair of ASA-5545X's running 9.14.2 that we'd like to try to configure Windows NPS for users to be placed into VLANs when they VPN into our firewall. Reference https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-n...
I have Cisco ISE 2.6 patch 8; physical appliance; each node has dedicated personas.I have successful ODBC connection with SQL server; and it works completely fine. I have added 8 various container in ISE as a ODBC external connection but recently i h...
Hello All, I've been on this for days now and have made a bit of progress but haven't quite gotten it yet. I'm trying to establish an LDAPS connection between an ASA5525-X and Ms AD on Server 2016 for use in authenticating Anyconnect VPN users coming...
Hello, Public IP block from ISP gave is all occupied, so I requested extended IP block to ISP.so I got new IP block with new port (same router), but I am not sure how can I make this new IP block to apply my firepower.Here is the image what I am cons...
