Security

Resolved! FTD wildcard cert showing CA not available

I have imported the PKCS12 file into objects > PKI > Cert enrollmentWhen adding the cert to the device it is stating CA not available.. is this because the CA Root and Sub CA's are also required to be added to the PKI cert enrollment section?This par...

Cisco switch authentication problem with ISE

Dear All, I have an issue with the following switches, switch 1 its could authenticate with ISE, whereas switch 2 its doesn't, when i run "sh authentication session" its has traffic in switch 1 and switch 2 no session show at all, and wh...

Resolved! Ikev2 Ipsec Between Asa and Sonicwall

Hi team, Need help in understanding an issue faced when creating a tunnel between Asa and Sonicwall (Issue got resolved) still need help to understand. SonicWall: Phase 1Ikev2Encryption aesAuthentication sha265Dh 14Lifetime 86400 Asa: phase 1Ikev2 En...

Resolved! FMC100 migration to FMCv

@Marvin Rhoads kindl please suggest if my approach is right as the cisco documention is overwhelming. what I read from your post replies and other this is the right process from FMC1000 migration to FMCv • 1 Deploy new FMCv in virtual environment • 2...

Firepower 1120 stuck in boot and factory reset

Hi.We have an 1120 that just blinks green in the status LED.So I've connected to the CLI via USB and can see it stops at "Creating FXOS swap file..." when booting from itself. But also if I try to boot with a new image on a USB.When I try to factory ...

Resolved! firepower SSL policy cipher suite for default action

In my SSL/decryption policy advanced settings I have chosen the option to block unknown cipher suites and therefore in my connection logs I see lots of connections that are blocked due to unknown cipher suites, which is expected. However, the partic...

Cisco ISE 3.3 Policy Set Monitoring Feature

I created a couple policy rules and selected the Monitor feature. After applying the changes, I am not seeing any hits on the rules I created. I found in old forums the monitor feature really doesn't work. The customers were using 2.4 at the time ...

Using Let's Encrypt Certificates with Cisco ISE

Table of Contents Table of ContentsSummaryACMEObtaining the CertificatesObtain the Certificate from Let's EncryptIdentify the Signing Certificate AuthoritiesObtain the ISRG Root X1 CertificateUploading the Certificates to ISEUpload the ISRG Root X1...

Resolved! ISE Indexing Engine is not running.

I get an error in the ISE console indicating the ISE Indexing Engine is not running.When I run show application status ise in the cli I get the below screen shot.I have tried to start and stop the ISE as well as rebooting the ISE appliance.Can anyone...

What is the purpose of Timestamp in ConnectionData.xml file

Hi all;Look at the following figure:As you can see, every primary section has a "timestamp" section. I want to know that what is the purpose of this timestamp?Thanks

Firewall Port For Cisco ESA

In Firewall Infomation for Cisco ESA, i see port 628 and port 2222 for the direction it show In & In. What is the meaning of In & In ? Thank you

Sender Domain Reputation: Unknown error

Hello, I've got lots of errors of that type with SDR: SDR: Message was not scanned for Sender Domain Reputation Reason: Unknown error Checked the documentation at https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-2/user_guide/b_ESA_Admin_Guide...

Resolved! Installing and using OpenSSL tool

I am trying to install the openssl tool detailed in this guide - https://www.linkedin.com/pulse/anyconnect-ftd-pkcs12-openssl-matt-albrecht/I have the openssl-3.2.3.tar file. But not sure what to do next, I have a Windows machine..

ASAv AnyConnect Azure SAML Integration

I'm working on an ASAv deployed in Azure and had a working AnyConnect configuration using LDAP to a DC in Azure. I tried to setup SAML with Azure AD today and while it appears to be partially working, users are unable to connect. This is my configu...

Firepower 1000 setup

This might be a dumb question but how would you set up the ASA firewall 1000 without internet connection? I have a switch that connects to it. I think I can console into it with putty but isnt there a gui ?