Hi,Just wondering if someone can give me a use case when it's actually any benefit in implementing ' ip verify unicast source reachable-via any allow-default'. it basically doesn't check the packet against the interface, and for source it match it ag...
Forum Posts
Hello,We are currently using Cisco 2110s, and it appears that Cisco still does not allow us to remediate elephant flows in the advanced section. The only way to reduce the impact seems to be by setting up a trust rule for specific traffic. Upon analy...
Hello, I have configured the Cisco ISE as a guest portal. The users can register themselves and then a sponsor has to approve them. This all works. I now have the problem that in the first phase, as soon as I click on the SSID, I am redirected and ca...
Resolved! FTD Geolocation Question
FTD 2110 on 7.4 Geolocation 2024-12-14-066I have an Access Control Policy (ACP) rule configured to block access from our internal network to several foreign countries using Cisco’s Geolocation feature. However, I’m still observing traffic to these bl...
Dear We are looking to fix this vulnerability CVE-2017-9798But the condition is using the default configuration , which configuration that should be checked to validate if we are infected or not
Hi Team,Could anyone please help me with the below request.Looking to upgrade Cisco ISE 2.7 to Cisco ISE 3.2. Need 100 nodes and Essentials only. Can you please let me know what should be the SKU for creating the estimate/BOM in CCW tool?
Hi.I am trying to setup CRL on ASA 9.20 on Cisco Firepower 1010 but when trying to request crl I get "Unable to parse CRL".I tried PEM and DER, always the same.debug crypto ca 14 gives: PKI[13]: label: ASDM-OF4 PKI[12]: pki_ossl_rebuild_ca_store, pk...
Join the ranks of some of the best, brightest, and most passionate technologists. The 2025 Cisco Champion application is now open. Apply by February 28, 2025. As a Cisco Champion, you will: Get early insights into new Cisco products and solutio...
Time flies when you are having fun! Excited to share that in our latest fiscal year, the Cisco Security Technical Alliance has achieved over 800 product-to-product integrations. Explore more details in my blog. https://blogs.cisco.com/security/synerg...
Resolved! FTD Missing Logs
FTD 7.4.1I’m currently troubleshooting an issue with our FTD and I’m unable to generate logs, which is puzzling. I ran a system support trace that produced a few logs with an ID, and I matched that ID to my access list, confirming that logging is ena...
Hi everyone. I'm looking for guidance for what to include in a UAT for Cisco ETD, can anyone help? Thanks
Hi ,I am having trouble configuring TACACS in cisco IR 1101-k9. (17.10.01a)While adding key to the tacacs its not getting encrypted. Device is AES enabled."key 0 <CLEAR TEXT>" or "Key <CLEAR TEXT>" only these two command line device is accepting but...
Where can I find a Letter of Volatility for a Catalyst 3560. I attempted to find it on the Cisco web site and was unable to find it. If you know the URL, please send it to me. For those who do not know what a Letter of Volatility is (also known as S...
Resolved! Migration from FMC 1000 to vFMC
Estoy buscando de migrar de un FMC 1000 fisico a un FMC virtual, y no lo he logrado de hacerlo de forma exitosa, baje un backup y lo restaure en el virtual y no fue posible, alguno a realizado de forma exitosa una migracion.
Due to the recent vulnerability https://terrapin-attack.com/ that is a MITM attack against weaker SSH algorithms. We are wanting to move our SSH authentication and algorithms to non affected algorithms including newer security algorithms such as ECDS...
