I have just set up a new certificate server on a router in our network and can download the certifcate from it OK.But I do see this message%PKI-2-CERT_SHADOW_INSTALL_FAIL: Content-Type indicates we did not receive CA certificate for TrustpointBut if ...
Forum Posts
Hello,Currently have 2110s running 7.4.2 and I've been playing around with EVE which brought me to the conversation about QUIC. I wanted to get a feel for what others are doing with QUIC and if most are allowing this or blocking it all together.Thank...
My customer, head of security, wants to ensure the newsletter she is receiving from Cisco/Talos is not some marketing scam. She questioned the sender: Cisco <engage@b2me.cisco.com> and wants to validate it's authenticity as it is being sent to her s...
hello all,i have ftd 2110 with a ssl policy applied, when i try to download anything , the download starts but sometimes it is completed and sometimes it is blacklisted by snort, my access policy is with action " allow " for any traffic coming from t...
I would like your opinion on how to implement Umbrella in our client.There are two locations. The central office and a remote office.All the servers are located in the central office.There is a site-to-site VPN between both locations. The central off...
Hi,Just wondering if someone can give me a use case when it's actually any benefit in implementing ' ip verify unicast source reachable-via any allow-default'. it basically doesn't check the packet against the interface, and for source it match it ag...
Hello,We are currently using Cisco 2110s, and it appears that Cisco still does not allow us to remediate elephant flows in the advanced section. The only way to reduce the impact seems to be by setting up a trust rule for specific traffic. Upon analy...
Resolved! FTD Geolocation Question
FTD 2110 on 7.4 Geolocation 2024-12-14-066I have an Access Control Policy (ACP) rule configured to block access from our internal network to several foreign countries using Cisco’s Geolocation feature. However, I’m still observing traffic to these bl...
Hi Team,Could anyone please help me with the below request.Looking to upgrade Cisco ISE 2.7 to Cisco ISE 3.2. Need 100 nodes and Essentials only. Can you please let me know what should be the SKU for creating the estimate/BOM in CCW tool?
Hi.I am trying to setup CRL on ASA 9.20 on Cisco Firepower 1010 but when trying to request crl I get "Unable to parse CRL".I tried PEM and DER, always the same.debug crypto ca 14 gives: PKI[13]: label: ASDM-OF4 PKI[12]: pki_ossl_rebuild_ca_store, pk...
Join the ranks of some of the best, brightest, and most passionate technologists. The 2025 Cisco Champion application is now open. Apply by February 28, 2025. As a Cisco Champion, you will: Get early insights into new Cisco products and solutio...
Time flies when you are having fun! Excited to share that in our latest fiscal year, the Cisco Security Technical Alliance has achieved over 800 product-to-product integrations. Explore more details in my blog. https://blogs.cisco.com/security/synerg...
Resolved! FTD Missing Logs
FTD 7.4.1I’m currently troubleshooting an issue with our FTD and I’m unable to generate logs, which is puzzling. I ran a system support trace that produced a few logs with an ID, and I matched that ID to my access list, confirming that logging is ena...
Hi everyone. I'm looking for guidance for what to include in a UAT for Cisco ETD, can anyone help? Thanks
Hi ,I am having trouble configuring TACACS in cisco IR 1101-k9. (17.10.01a)While adding key to the tacacs its not getting encrypted. Device is AES enabled."key 0 <CLEAR TEXT>" or "Key <CLEAR TEXT>" only these two command line device is accepting but...
