Taking a snapshot of ISE virtual machines is not supported but it still happens occasionally due to administrators taking a snapshot manually or an integrated technology that automatically takes snapshots to back up VMs. When taking a snapshot of a live VM, the file system is quiesced which can lead to the ISE node becoming unresponsive or worse, corrupting it requiring a rebuild.
A configuration parameter can be added to each ISE VM to prevent a snapshot from being taken. See the attached document for the steps with screenshots or follow the steps below:
Before powering on the ISE VM for the first time, right-click the VM and click Edit Settings. If the VM is already powered on, you must shut it down to make changes.
Click the VM Options tab.
Click Advanced to expand it.
Scroll to the bottom and locate Configuration Parameters and click the Edit Configuration button.
Click the Add Configuration Params button.
Enter snapshot.maxSnapshots into the Name field and enter 0 into the Value field, then click OK.
Attempt to create a snapshot of the VM to test. The task should error out.
If I am not wrong the group policies are mapped to the connection profiles (tunnel-groups) and they applied to the users based on the group they choose in the cisco any client software. So what happens to the group policies which are not part of any ...
Hello Firepower community,On Firepower 6.4.x does anyone if it is possible with FMC/FTD to configure SSL inspection bypass using FQDN of target host?I have configured bypass using certificate issuer DN and while this does bypass SSL inspection for connect...
Currently we have an open incident with support. Half of our hosts in a CES cluster are backed up significantly. Those backed up are all in 68.232.x.x subnet. Those not backed up are al 216.71.x.x. Is anyone else experiencing this?...
Trying to implement a SSL cert for the web server on a Firepower 1010.Not managed by a FMC (yet). Still in Testing/R&D phase. I'm not using a known/trusted certificate authority. I have my own CA cert, generated locally, distributed locally, then...