Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I can see some logs on the FireSight for sourcefire events with action "would be blocked", what is meant by this action and when is it used instead of normal "block"action?
We have switch WS-C3750X-24P with IOS 15.0(2)SE8 , we found that applied DACL from AAA server not working properly.
for example , denied telnet traffic is allowed.
I tried the same on another switch (different model and IOS) and the DACL working prop...
Hello,
we have ISE 1.4 patch 4 , suddenly all switches in WAN can't download DACL and then put the use in Authz failed.
this issue didn't happened in LAN.
Also we tried to decrease the lines of ACL to 22 lines and then it is working , but it ...
I am searching for documents on Cisco ISE that describe how we can integrate it with HP ArcSight , I didn't find such document on Cisco.com.Are you have any of them?