Network Security

Resolved! FMC Question

Hi, I've installed my firepower from ftd management (locally) and it is working now. What happens if I add this FTD to the FMC? Is the configuration is lost or the configuration is fetched from ftd to the fmc? Thanks.

Firepower 2110 HA dual ISP

I have a customer currently running 6.2.2 FirePower code managed via FMC. They have 2 separate circuits from the same ISP with different ranges and want Circuit1 connected to Primary and Circuit2 to Secondary so that, should a failover happen, they...

Resolved! Licensing ASA 55xx running ASA code connected to FP MC

I have 3 ASA 55xx-X devices which are running ASA 9.9(2) code and FP code v6.2.3.11 All devices have Protect and Control license. When they are connected to Virtual FirePower MC they are listed as unlicensed. They were properly licensed before connec...

certificate update

Hello,We are updating ssl certificate on secondary ASA.The CA also needs updating, hence the CA is first put in under CA certificates.Adding it , the error shown is "if ASDM sends configuration to this Standby ASA, thestandby will not forward the co...

Cisco ISE Upgrade from 2.2 to 2.4

Hi all , we have Cisco ISE distributed deployment , i want to do auto upgrade via GUI . i know the process but my question is can i pause the Upgrade after 3 personas upgrade done ? and resume the upgrade after one day for remaining 3 personas ...

Resolved! NGFWv deployment in Azure

I'm deploying NGFWv appliance in Azure. Since the license model in Azure is BYOL, what specific licenses or PAKs do I need to buy to utilize this appliance in Azure. I couldn't find detailed information online. Thank you.

Error to validate in switch Cisco through tacats configured in ISE

Hello peopple, I configured the Cisco ISE to authenticate in the company's switches validating through TACATS Server. The problem is that after a while, I can not validate on the switches and it shows me the message "Authenticat...

Advertising VPN local pool network in bgp

Hello Community, I have a ASA with a local VPN Pool where the VPN users get their IP-address. Is it possible to advertise this network in the bgp process? Thanks and regards,Philipp

FTD/FMC Stream Packet To Splunk (Cisco eStreamer eNcore for Splunk (3.5.1))

I have eStreamer setup to forward logs to our Splunk instance; however, I am not receiving any packet data. In the TA-eStreamer setup I have "Packets?" checked.In the FMC eStreamer Event Configuration, I have "Intrusion Event Packet Data" checked. Si...

ISE send bad information for Palo-Alto User-ID Agent

Hi, From our Firewall PALO ALTO, I try to get informations from ISE SNMP logs in order to identify users connected to ISE, to give them access to ressources.... I need to be able to link Username and IP address... Then, I get info from this log : (...