Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Freemen
Stats
Member since
10-28-2012
118
Posts
5
Helpful
4
Solutions
Certifications
Created by
Freemen
in Network Security
in Network Security
03-11-2020
10:23 AM
03-11-2020
10:23 AM
is a bug https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvp03354/?rfs=iqvred
... View more
03-11-2020
03:42 AM
Hi all, I can't find any document mentioned that asa virtual cannot turn on HostScan feature. any one can advise?
... View more
Labels:
Created by
Freemen
in Other Security Subjects
in Other Security Subjects
03-03-2020
12:12 AM
03-03-2020
12:12 AM
I am testing Stealthwatch version 7.1.2 with SLIC, thinking wanted to test the SLIC Tor Entrance / Exit but seam like Cisco Talos not complete database or I testing using wrong way.. Install TOR browser and check if Stealthwatch able to catch me, and it fail to catch me. while the whatismyipaddress.com able to know that is a TOR exit. Anyone can give me advise?
... View more
Labels:
03-02-2020
11:30 PM
One of the default at Stealthwatch is watch port, but during testing, I using NMAP to port scan a /24 network, and all the alarm is flooding, so my question is. is best practice to disable the watch port active?
... View more
Labels:
Created by
Freemen
in Network Access Control
in Network Access Control
02-27-2020
07:47 PM
02-27-2020
07:47 PM
Hi, Is that anyway to disable it?
... View more
Created by
Freemen
in Network Access Control
in Network Access Control
02-21-2020
02:31 AM
02-21-2020
02:31 AM
hi it run for PAN node only almost 2 year already but the mac endpoint inactive day is 2 day.. that why it is weird to me.
... View more
Created by
Freemen
in Network Access Control
in Network Access Control
02-19-2020
08:16 PM
02-19-2020
08:16 PM
ISE 2.4 Patch 5 SNS3595 PAN node, no PSN service enable but context visibility have some mac address learned. Please advise is this expected?
... View more
Labels:
Created by
Freemen
in Network Access Control
in Network Access Control
01-19-2020
06:06 AM
01-19-2020
06:06 AM
Deployment 3615 PAN, MNT, PSN ISE 2.6 p3, no snmp NMS monitoring in one of the midnight around 3 am, i have high load average alarm, however the health report shown average is 3% CPU (1hour Average). No backup, endpoint purge running, no schedule task was run. what i understand is that this during 5 min time it might happen high CPU, but i no way to tell because it average out to 1 hour.. so i get 3%, can i understand that even maybe 1 second all core went 100% then drop back to 3% this alarm also will generated?, this alarm unlike memory can be custom set to 90%, so that is confusing "The ISE system is experiencing high load average.The load average number represents the average system load over a 5-minute period.A load average of 8.00 is 100% CPU utilization on 8-core box. This alarm will be triggered when the load average is above the number of processors available on your system"
... View more
Labels:
Created by
Freemen
in Network Access Control
in Network Access Control
12-19-2019
11:37 PM
12-19-2019
11:37 PM
it overwrite all portal with the same port... just too surprise and careful
... View more
12-19-2019
06:18 PM
just ensure when u upload the new portal, existing portal certificate tag is default. if existing portal eg client provisioning portal (8443) is difference portal tag, it will become default portal tag when uploaded.. (verify with cisco support) so in my case those anyconnect seen a default cert and get warning untrusted server.... Good Luck Have Fun
... View more
Created by
Freemen
in Network Access Control
in Network Access Control
12-19-2019
01:37 AM
12-19-2019
01:37 AM
i have public sign cert assigned to client provisioning portal for posture. which is difference certificate tag. i upload a portal from portal builder, all the portal changed to default certificate tag, that resulted the Anyconnect prompted for the certificate warning. i was disappointing, that will causing so huge impact.... hope my lesson learn can help someone to avoid the issue.
... View more
Labels:
12-19-2019
12:26 AM
Hi all, the idle timeout does it mean the switch port not seen any packet from the port for x number of minute then it will session terminate? anyway to simulate idle timeout? even a normal pc not running any application, but still got some background traffic on the LAN port right?
... View more
Labels:
Created by
Freemen
in Network Access Control
in Network Access Control
12-19-2019
12:22 AM
12-19-2019
12:22 AM
Hi all, ISE 2.6p3 Anyconnect 4.7 generally testing on win7, win 10 whole posture process took 40 second or more,(AV Inst, AV Deft, Win Update Enable, App Vis) Is the time is acceptable? can share with me yours other experience how long time posture process taken on other environment?
... View more
Labels:
Created by
Freemen
in Network Access Control
in Network Access Control
12-17-2019
09:39 PM
12-17-2019
09:39 PM
turned out seam like disable the auto probe is the only way to resolve.
... View more
03-11-2020
Hi all, I can't find any document mentioned that asa virtual cannot turn
on HostScan feature. any on...
03-03-2020
I am testing Stealthwatch version 7.1.2 with SLIC, thinking wanted to
test the SLIC Tor Entrance / E...
03-02-2020
One of the default at Stealthwatch is watch port, but during testing, I
using NMAP to port scan a /2...
Created by
Freemen
in Network Access Control
02-27-2020
02-27-2020
Hi, Is that anyway to disable it?
Created by
Freemen
in Network Access Control
02-21-2020
02-21-2020
hi it run for PAN node only almost 2 year already but the mac endpoint
inactive day is 2 day.. that ...
Created by
Freemen
in Network Access Control
02-19-2020
02-19-2020
ISE 2.4 Patch 5 SNS3595 PAN node, no PSN service enable but context
visibility have some mac address...
Created by
Freemen
in Network Access Control
01-19-2020
01-19-2020
Deployment 3615 PAN, MNT, PSN ISE 2.6 p3, no snmp NMS monitoring in one
of the midnight around 3 am,...
12-19-2019
just ensure when u upload the new portal, existing portal certificate
tag is default. if existing po...
12-19-2019
i have public sign cert assigned to client provisioning portal for
posture. which is difference cert...
12-19-2019
Hi all, the idle timeout does it mean the switch port not seen any
packet from the port for x number...
Created by
Freemen
in Network Access Control
12-19-2019
12-19-2019
Hi all,ISE 2.6p3 Anyconnect 4.7 generally testing on win7, win 10 whole
posture process took 40 seco...
Created by
Freemen
in Network Access Control
12-17-2019
12-17-2019
turned out seam like disable the auto probe is the only way to resolve.
Public Statistics
| Date Registered | 10-28-2012 09:18 PM |
| Date Last Visited | 04-03-2020 02:01 AM |
| Total Messages Posted | 118 |
| Total Helpful Votes Received | 5 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 16 | |
| 5 | |
| 10 | |
| 5 | |
| 5 |
.jpg "Hall of Fame Guru"){kind=icon}
