Taking a snapshot of ISE virtual machines is not supported but it still happens occasionally due to administrators taking a snapshot manually or an integrated technology that automatically takes snapshots to back up VMs. When taking a snapshot of a live VM, the file system is quiesced which can lead to the ISE node becoming unresponsive or worse, corrupting it requiring a rebuild.
A configuration parameter can be added to each ISE VM to prevent a snapshot from being taken. See the attached document for the steps with screenshots or follow the steps below:
Before powering on the ISE VM for the first time, right-click the VM and click Edit Settings. If the VM is already powered on, you must shut it down to make changes.
Click the VM Options tab.
Click Advanced to expand it.
Scroll to the bottom and locate Configuration Parameters and click the Edit Configuration button.
Click the Add Configuration Params button.
Enter snapshot.maxSnapshots into the Name field and enter 0 into the Value field, then click OK.
Attempt to create a snapshot of the VM to test. The task should error out.
Currently we have an open incident with support. Half of our hosts in a CES cluster are backed up significantly. Those backed up are all in 68.232.x.x subnet. Those not backed up are al 216.71.x.x. Is anyone else experiencing this?...
Trying to implement a SSL cert for the web server on a Firepower 1010.Not managed by a FMC (yet). Still in Testing/R&D phase. I'm not using a known/trusted certificate authority. I have my own CA cert, generated locally, distributed locally, then...
How much security is enough? How do you know if you have the right security products in place to protect your organization, and how much should you actually spend on security?
The latest Cisco Cybersecurity report addresses these questions and more.
HelloI am currently running an ASA 5515-x with version 9.2 and AnyConnect 3.1.I am working on upgradring both of these, but uncertain in which order to proceed. Will Anyconnect 3.1 still work after upgrading my ASA to version 9.8 or 9.6 ?Or do i have...
Hello,does it make sense to use AMP for Endpoints and also an AMP license on the Email Security Appliance (ESA)?AMP for endpoints is installed on every client and server so we are just wondering if licensing also the ESA appliance with AMP would provide a...