Hello Evan, Static and dynamic malware analysis: A highly secure sandboxing environment helps you run, analyze, and test malware in order to discover previously unknown zero-day threats. Integration of Threat Grid’s sandboxing and static and dynamic malware analysis technology into AMP solutions results in a more comprehensive analysis checked against a larger set of behavioral indicator. ... View more

To restore a FireSIGHT System appliance: Access: Admin Step 1 Determine the model of the appliance (device or Defense Center) you want to restore. Step 2 Obtain the correct restore ISO image from the Support Site. Step 3 Copy the image to an appropriate storage medium. Step 4 Connect to the appliance. Step 5 Reboot the appliance and invoke the restore utility. Step 6 Install the ISO image. Link http://www.cisco.com/c/en/us/td/docs/security/firesight/541/install-guide/FireSIGHT-Installation-Guide/restoring-factory-defaults.html ... View more

The LAP, if doesn't receive any packet in past 30 seconds, then it retransmits the packet for 5 times after that, at an interval of 3 seconds. So no communication to wlc on control channel for 45 seconds will result in tearing down of tunnel. WLC on the other hand takes 90 seconds to determine that ap had lost communication. In your logs, the WTP event message was delivered to wlc and had a payload in it, which tried to inform wlc about a link failure. The error is pretty generic in nature, and there could have been many problems that AP could have deduced as link failure. For example, in one of the cases, it was dynamic arp inspection We could not narrow down this, only after we went to the switch and looked at the following logs:- May 29 14:12:03: %PM-4-ERR_DISABLE: arp-inspection error detected on Gi1/0/44, putting Gi1/0/44 in err-disable state May 29 14:12:04: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/44, changed state to down May 29 14:12:05: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/44, changed state to down May 29 14:17:03: %PM-4-ERR_RECOVER: Attempting to recover from arp-inspection err-disable state on Gi1/0/44 May 29 14:17:23: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/44, changed state to up May 29 14:17:25: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/44, changed state to up After applying ip arp inspection trust for all the APs, the service was back. So we will have to go in that direction. Please check in your network, what all occurred in that duration. ... View more

It seems to be the issue of the software on the IPAD or the interference issue are the software on all the ipad is same? ... View more

If you see some problem in web interface pages then could you please check current software on the 1300 Ap. If its old then try another image. You can try the CLI if GUI not working. ... View more

Always try to asociate the root and non root bridge with open authentication first. Also LOS should be clear.. ... View more

No two AP need not to be in sight of each other. Just the AP should be powered up and proper config should be done on that.   ... View more

The answer will depend on the regulatory domain of the AP. In the US, there are 5 contiguous 80 MHz channels. Those 80 MHz channels can be combined to create 160 MHz channels. There are only 2 80 MHz channels that do not require DFS ... View more

Try changing method list for CWA to dot1x/group Enable Fast SSID Change On the Wlan Advanced tab: disable client timeout, client exclusion, MFP, Aironet IE ... View more

Please find the link whic can be a help in config -   http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107474-web-pass-config.html   Also in your radius server port config I can see that you have configred 1646 as acc-port should not it be 1813?   radius server 192.168.10.2 address ipv4 192.168.10.2 auth-port 1812 acct-port 1646 ... View more

Problem Summary : AP association counter versus WLC association counter do not fit. Workaround : upgrade software Solution : upgrade software Root Cause : CSCtn52995 ... View more

This is not supported but may work. You may face packet loss if you are using only one anteena. * Multiple streams using separate sub-carriers with the same signal transmitted across all the installed antennas (difference being delay to aggregate signals)? * Multiple streams where a different data stream is transmitted out each antenna to reach the same client? Is the packet loss the clients would experience from using only one antenna more along the lines of * the smaller coverage area from what would be achieved with a similar gain MIMO antenna? * the AP dividing/fragmenting a single client's data stream across antennas? ... View more

&& %DHCP-4-REQIP_NOT_PRESENT: dhcpd.c:301 Received a packet without a requested ip!. This is there is a DHCP request, and WLC did not obtain a valid IP address on the DHCP fields. Typically, client did request for 0.0.0.0. could you please try pushing the wlan template again.   ... View more

possibly AP  record is stuck in controller database.. try rebooting the controller if possible.. ... View more