Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We were affected several times for an error that prevented us to continue with the deployment of any modifications in our Cisco Firepower, and the error seems to be related to ISE/SGT integration:At the moment, we are using the following workaround: ...
FMC Version 7.2.5.1AD Integration failing when switched from LDAP to LDAPS with general error - check user/password/connectivity. AD Server is in the same network, accepting LDAPS from any source, user/password was double-checked, AD Root-CA certific...
We have a need to merge Authorization Profiles in a Policy Set. By default, ISE will select the first match for a RADIUS attribute and will not combine any other matches that contains that attribute. Only single statements with multiple Authorization...
trying to migrate our ISE nodes to 3.2 version in a VM-based infrastructure, I am trying to boot VMs into the ise-3.2.0.542a.SPA.x86_64.iso image as obtained from Cisco's software download center but I keep getting the attached error. It is worth no...
after upgrade, i got the same error as in this BUG,
I deregistered and registered again but the same license error
The workaround says:
1. vim into the file /etc/sf/.health_monitor.data and delete the following line.
IDCERTEXPERR:2
admin@FMC1...
Yes, we are using the “DigIT_Infra” SGT. That is the only one you can see in the screenshot, but the full list of all SGT is included in the scroll down window. This mans that is complaining about all of them.
As far as I understand, I need SXP bet...
Prioritization doesn’t work for this situation, because I need multiple results to be merged as the user is a member of multiple EfficientIP groups that have different security access.
If we use prioritization, the users only have partial access to...
this is the output of the command
> system generate-troubleshoot all
Starting /usr/local/sf/bin/sf_troubleshoot.pl...
Please, be patient. This may take several minutes.
The troubleshoot option code specified is ALL.
getting filenames from [/ngfw/...
i haven’t “/var/common/…” but i have “/ngfw/var/common”
if this is the right path, i don’t see the file you asked for
These are the files that i found in that folder
root@IPS004-CI-4115-CAMPUS-COLL-B:/ngfw/var/common# ls -la
total 0
drwxr-sr-x 2...