Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi,We are experiencing the issue where even though Cisco Secure Client connects to our Remote VPN successfully it stops working either straight away or after a while. When it stops working it still shows as connected in secure client but all access t...
I am trying to limit SSH access to the management interface on FTDv firewalls via FMC Platform settings or flexconfig but it doesn't appear to be working.I originally tried to restrict access through adding SSH Access platform settings only from IP a...
I have a Cisco ISE server that I have built and it has crashed 3 days in a row despite passing all health checks. CPU seems to jump up from 10% to around 80-85% before all services then fail and the server needs rebooted. When it crashed it is not ac...
I have built two Cisco ISE servers in AWS. They are ISE version 3.4.0.608. They are in HA and syncing successfully however the primary ISE has crashed two days in a row since being built. There are no authentication attempts against these ISE servers...
Hi,I attempted to update a Cisco Firepower 2110 Threat Defense firewall to v7.4.3 from 7.4.2.2. It passed the readiness check but then errored during the upgrade and rolled back. It provided the error below in the log:user: 'admin' cannot be created,...
I rebuilt the ISE servers v3.5. This seems more stable but the primary does seem to crash every two months. When it crashes the server is still up but web interface and ssh is unaccessable. Requiring the server to be shutdown and powered back up in o...
Unfortunately after doing this it hasn't helped the issues. However, no 10.1.1.0/24 address appears as a threat when I run show threat-detection scanning-threat now.None of the 10.1.1.0/24 IPs are being shunned either so seems unrelated. Issue with V...
Thanks @Rob Ingram , I noticed below were default values being applied to the firewall not via a flexconfig object.threat-detection rate scanning-threat rate-interval 600 average-rate 5 burst-rate 10threat-detection rate scanning-threat rate-interval...
I have discovered that IP addresses in the private IP range given to devices connected to the VPN via VPN are being blocked by the firewall. They appear to be getting blocked via threat detection setup through flexconfig with the details below in the...
