Activity in Security
[IOS-XE] AES password encryption setting is not reflected from GUI
I found an issue with the AES password encryption configuration from the GUI in IOS-XE 26.1.1 & 26.2.1.The AES password encryption feature was introduced in IOS-XE 26.1, but the corresponding configuration does not appear to be applied when configure...
Resolved! FTD Route based VPN
HiDo i need a no Nat rule for all traffic traversing our new route based VPN I cannot seem to find the answer to this question it was mentioned to me a while ago that for route based VPNs you must use a no NAT rule for all traffic.???
Inquiry regarding VRF support and limitations on Cisco FPR-1010
Hello,I would like to verify the VRF (Virtual Routing and Forwarding) capabilities for the Cisco Firepower 1010 (FPR-1010) hardware.Currently, the appliance is running FTD software version 7.4.2-172.Could you please confirm:-> Is VRF fully supported ...
Cisco Firepower VPN Setting with Azure SAML
Dears, I hope you're doing great. I need some assistance with an issue. I have a Cisco 2120 NGFW appliance running FTD. Remote Access VPN is currently active on port 443 and integrated with Azure via SSO; however, when I change the port (e.g., to 54...
Get the most out of Identity Intelligence
Attackers don’t need to break in when they can just log in. Stolen credentials and modern phishing strategies, now significantly enhanced by AI capabilities, mean you cannot rely on MFA alone to ensure an identity is trustworthy. Most organizations h...
Meraki API assigning switches to new network
I have notice when adding switches to new network, the API to gather information about switch ports, it returns "Null" for short period {"portId": "1","name": null,"interface": {"name": null,"switch": null,"module": null,"slot": null,"subslot": null,...
[Video] Cisco Duo - How To Enroll or Disable Users
In this video, we discuss the process of enrolling and disabling users in Cisco Duo, manage authentication methods, and simplify onboarding and offboarding for Duo-protected applications. https://www.youtube.com/watch?v=GUWijSOlfeQ
CSCww60745 - FMC GUI packetcap fails when the nameif contains a dot
Fabulous - so by following the normal process of naming sub-interfaces (from memory the documentation has guided you to use points for subifs since the dawn of time) - I now have to delve into the CLI to construct packet captures.I see the bug is mar...
Management VPN with full tunnel during ASA-to-FTD migration
Dear all,We are migrating our remote-access VPN configuration from ASA to FTD managed by FMC.Our current ASA configuration uses a Management VPN Tunnel in full-tunnel mode, enabled through the AnyConnect custom attribute described here:Configure a Cu...
ESA internet.nl cipher string
Hi Team, This post is for all of you in the Netherlands who have customers (or your own company) that want to comply to internet.nl and get to that hall of fame with Cisco ESA's but have no clue how to get there or dont want to be too strict. What is...
Resolved! FMC HA Degraded- Synchronization incomplete
Hi Gents,Anyone here tried fixing this error on FMC HA? "Degraded- Synchronization incomplete (This Management Center has fewer devices registered)" and also the registration status to the FTD on the secondary(standby) FMC is still on "Pending Regist...
ASA5545X still sending logs after ACE command LOG DISABLE
Good day team,We have ASA5545X with several S2S iPsec policy based.I noticed that after creating 2 ACLs on OUTSIDE and CP I am still see logs that certain IP is trying ti establish tunnel...I have blocked this IP in regular ASCL on OUTSIDE interface ...
Cisco Secure AI Defense
I recently had a discussion over at Cisco Insider with Mohamed Alhenawy about AI and malicious actors. We discussed various threats, including how attackers are updating their attacks to use AI—such as asking it to search Git and GitHub for usernames...
Not receiving mails from SMA
I moved one of our SMTP boxes to a new SMA, and mail still works from both internals and externals. However, when trying to either release or send copy of a mail from the SMA, it says the email was sent successfully, but it never arrives. The only di...
Resolved! FMC with Identity Policy using Azure AD
Hi All,We are currently running FMC and FTD with user identity access control polices. FMC is integrated with ISE, which in turn is integrated with our on-premises Microsoft Active Directing domain using WMI so that user to IP mappings can be passed ...
| User | Helpful Count |
|---|---|
| 20 | |
| 14 | |
| 13 | |
| 11 | |
| 11 |
