Activity in Security
ISE posture-endpoint port change
in cisco ISE wire posturing, how to achieve below use-case; endpoint windows laptop is connected to switch port 4. If the endpoint is moved to another switch port access should be blocked.
HOW TO SETUP CISCO ANYCONNECT ON CISCO 891K/9 and 2901 Router
Hi Community People..,I have an urgent need to setup a VPN for remote Workers.Please I would like anyone with the requisite solution to come to my Aidewhat Licenses do I need on the router ?What are the configuration StepsRegards.
Firepower Management Center Backup SSH Keypair
Hi, we store our backups to a remote storage via sftp. It's possible to do this with SSH public/private keys. The FMC default uses ssh-rsa key for root@firepower which is stored in /etc/ssh on the filesystem. The remote server doesn't accept rsa keyp...
Is it acceptable to split an FTD Pair (Active - Standby)?
Hello, We have a pair of FTD2130 behind a pair of routers (border routers for the campus, running BGP). This is Campus A (main campus).The topology is described briefly below:The FTD pair (running v7.2.10.2) is in Active-Standby mode; it serves as Fi...
FTD Etherchannel/LACP question
Hello, I have a FTD 1010 in my home lab that's using 1 routed interface for outside and the rest of the interfaces are used as switchports on a VLAN that I use for the Inside. Now I also have a Synology NAS with two interfaces that can be bond toge...
FPR1000 - FTD code to ASA code "couldn't install the ASA image"
Hi All,I’m converting an FTD code to ASA on a Firepower 1140. I downloaded the ASA image via USB and have console access, but when I try to install it, I get an “invalid version” error - as per attached images. Can you help me identify what I might ...
IPsec Tunnel Support Between Azure ISE and Azure WLC (Hosted in Azure)
I am currently working on a deployment where Cisco ISE is hosted on an Azure VM, and the goal is to establish an IPsec tunnel between ISE and a Cisco Wireless LAN Controller (9800-CL WLC), also hosted within Azure (VM-based deployment). I would like ...
Resolved! Dynamic vlan using Cisco ISE
Hi all,we have deployed voice solution across the estate using dynamic vlan via Cisco ISE. All the switches configured with vlan 5 as the default vlan and voice vlan will be vlan 488 ,deployed via cisco ISE using dynamic vlan.My question is , if both...
Resolved! Unable to receive AMR claim in Generic OIDC Relying Party Application
Hello Everyone,I'm having trouble configuring the AMR (Authentication Methods References) claim in my Generic OIDC Relying Party Application and would appreciate any guidance.I have successfully configured a Generic OIDC Relying Party Application in ...
Hybrid Mesh Firewall: Overview
In this webinar, Cisco Experts highlighted Cisco's strategic initiative for the Hybrid Mesh Firewall, focusing on its functionality across physical, virtual, and cloud environments, and how it's managed through Cisco Security Cloud Control. This s...
Licensing in Cisco MCD Dashboard blank expiry date
When I log into my Security Cloud Control account and navigate to Platform Management > Subscriptions I'm presented with my Cisco Security Cloud Control Firewall Management Base and Cisco Multicloud Defense Premier, but the expiry date is BLANK. Is a...
Converting a FTD from routed to transparent mode - Management Question
Hello, I want to convert a FTD from routed to transparent mode and put it behind a router. Today I use the data/outside interface to manage this FTD from a FMC in another location. Since the FTD does not have a static IP, I use a dynamic DNS service ...
Forward/Rewrite email to specific recipients to another address
Hello, For a specific use case,I need to rewrite emails intended for certain users (but not for the entire domain) to another mailbox hosted on another domain. Example: john.doe@initial.com to john.doe@new.com I need to do this for several users (but...
CIsco ISE 802.1x EAP-TLS authentication with Entra ID
Our customer exisitng environment all PC join to entra id and no any infra in on-premise Now. they would like to implement new Wi-FI with kind of this solutions but it's look like very new for us and less experience Therefore, may I asking in this co...
Resolved! FTD managed via cdFMC but need to change the management address
Afternoon all, Recently we onboarded an FTD 1010 to cdFMC for cloud management. The management of the FTD (by cdFMC) is via is external data interface. There was a request to change the external IP address and therefore the routing table to a new ne...
| User | Helpful Count |
|---|---|
| 85 | |
| 45 | |
| 21 | |
| 20 | |
| 13 |
