Hello Pros, We recently have an audit for our Network in our company. The Auditors asked to change the NTP key from MD5 to Sha356. Never did that that before. Any idea? Any Article/weblink? Thanks in advanced.
Forum Posts
Network Segmentation of audio-video environment. I am looking Network Segmentation of our one Subnet of AV. Can anyone help me on this? If you have best example or step by step process to do it Cisco switch or will need firewall or any other third-pa...
Hello all Expertise, I want to define RBAC for user Operator in Cisco IOS. I have checked and tested lab with privilege 2-14 but it seem like I need to customize too many configuration for option VPN configuration and Route-map. Does anyone know ho...
1.5 Describe security intelligence authoring, sharing, and consumption. on the book OCG CCNP and CCIE security core SCOR 350 - 701 e2. it doesn't talk about this topic. the book said it is in on Chapter 1 or part of it, but I can't find out what th...
Team, My router has a hostname and ip-domain configured. If I use the following command manually on the router in config mode, I am able to generate the crypto key and enable SSH. crypto key generate rsa modulus 4096 However, if I load a new st...
Resolved! ASP Drop (acl-drop)
Hello,FTD 2110 on 7.4.2I'm investigating why I'm unable to reach a vendor destination off my secondary VPN. I ran an ASP capture and received the following message in bold. However, I can run a packet tracer using the same source and destinations in ...
Hello everyone, Recently it became necessary to reset the password for the admin user, and the old password was lost. At the same time, there was access to FW under a different administrator account on the CLI of the firewall. The task was not as si...
Hi Team,Could anyone please help me with the below request.Looking to upgrade Cisco ISE 2.7 to Cisco ISE 3.2. Need 100 nodes and Essentials only. Can you please let me know what should be the SKU for creating the estimate/BOM in CCW tool?
Resolved! Cisco VOIP configuration file
Hello Cisco community,I have query regarding for VOIP configuration file, i was able to pull all company's configuration file for each telephone which its extension end with ".cnf.xml.sgn" now we're doing hardening is it possible to disable or protec...
Hi folks,Our vulnerability scanning tool has picked up couple of OpenSSH related vulnerability in all our 9000 series switch. See attached screenshot.I checked for any related post online but I couldn't find anything, even though there are some relat...
When I SSH to a Cisco IPS from my MARS I get the following message - ssh x.x.x.x @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@...
Hi.I am trying to setup CRL on ASA 9.20 on Cisco Firepower 1010 but when trying to request crl I get "Unable to parse CRL".I tried PEM and DER, always the same.debug crypto ca 14 gives: PKI[13]: label: ASDM-OF4 PKI[12]: pki_ossl_rebuild_ca_store, pk...
below the description: 'A vulnerability in the web-based management interface of Cisco Expressway Series could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validatio...
Hey guys, Does anyone have SOP for how to put ports in the right vlan. I need to know step by step.Thank you all i
We are noticing some strange DHCP leases on our Cisco router. We noticed this issue as the pool was moving up faster than we knew clients were requesting new addresses. We noticed strange bindings like below: IP address Client-ID/ ...
