Dear all. I configured IPS on firepower and configured it to send me email when it is being triggered. I configured it on Policy-Action->Alert->Intrusion Email. All IPS rules has been selected. Approximately two days later of configuring IPS notifica...
Forum Posts
Hi, we are running virtual ISE PIC on demo License but now need to license it with permanent. Is there any SKU , I need to provide to Cisco and How many License I needs as Its talking to AD for passive authentication and FMC to share user to IP mappi...
Hi, I have console and management (eth0 port which is labeled as '1') connections to 2 FMC 1000 devices. I am working on getting these configured. I can get to the console connections for both. However the management connection on device 1 takes me ...
Subinterface was configured on Portchannel interface of FTD device. When I trying to remove it I getERROR: Remove failover mac address configured on this sub-interface firstFound this bug CSCvo58030. The problem is I don't have any failover mac addre...
Experts, Do you know how many split routes the client can support when asa and anyconnect do SSL VPN? A previous version had a limit of 200. How many can be supported after the upgrade has not been described in the documentation, please give pointers...
Resolved! Cisco ASA + NAT Configuration
I have Cisco ASA & below is the sequence of existing NAT. nat(inside,outside) source 1.1.1.1 2.2.2.1nat(inside,outside) source 1.1.1.2 2.2.2.2nat(inside,outside) source 1.1.1.3 2.2.2.3nat(inside,outside) source 1.1.1.4 2.2.2.4nat(inside,outside) sour...
I was just able to get vulnerability scanning for a vFMC suite with 2110's started and it's calling out the SSL Certificate cannot be trusted. This and a few others relating to the same thing. The FMC has a valid certificate, but the scans are pi...
Resolved! Allow Traffice Between VPN Users
Hi Experts, In order to be able to establish sofphone calls from one VPN user working from Home to another VPN user working from HOme too, I need to enable the traffic between VPN users. I have ASA 5515. My understanding is that I need to add a NATna...
Resolved! AnyConnect Split-Tunnel Configuration
We have a website that is accessible on the Internet and only allowed to be accessed via our public IP. We need vpn users to be able to access via anyconnect when they are not in the office. To accomplish this, do I just add the IP of the website int...
Resolved! Fortigate200E-Cisco 3850 Switch -LACP
Hi all , The 200E does not appear to have the Hardware switch option like the 100E's on which I was able to just allocate an internal ip (hardware switch) and I can get access to the switch without any more configurations.I need an internal network ...
Need your help on this issue on the ASA5525. QMS-BRC-DAAS-ASA5525# show processes cpu-usage | include DATAPATH - - 85.2% 76.0% 72.9% DATAPATH-0-1903 QMS-BRC-DAAS-ASA5525# show processes cpu-usage | include DATAPATH - ...
snmp-server group NMS-Bulletproof v3 privsnmp-server user BulletproofSNMP NMS-Bulletproof v3 encrypted auth sha ad:1c:9e:1a:f4:7a:9b:ce:cd:91:23:9f:cf:2e:e6:e9:80:57:99:5f priv aes 256 5f:e5:44:97:30:ea:25:44:ba:54:12:0d:69:be:96:c1:20:34:99:42:21:a3...
CVE-2018-0101 - ASA 55169.9.2.1 is not released yet as per cisco so I upgraded to 9.12.3 but getting CVE FAIL test from PCI Scan. Any sugggestion
We have a system in our DMZ which regularly hangs and the supplier have told us it's because we're NAT'ing the source address into the DMZ and the server can't handle so many connections coming from a single source address. Their recommendation is to...
