I am not sure if this forum is appropriate as I do not see much discussion available for Merak but anyways here goes   Does anyone know if the Meraki MX can be used as FMC does for Firepower in that for the Meraki network would allow to create specific content filtering for connected split tunneled spoke locations which are using Meraki Z1's??? Thus allowing governance over the spoke internet connections that are not going through HQ (Split Tunnel)???   The MX series has an advanced license you can purchase which allows content filtering via group policy for the Merak network but does not say anything about level of control within that network.     ... View more

Is the main difference between FPS and FTD that with FTD as far as management of the ASA goes that object/ACE creation will need to be done from the FMC itself and not possible through an ASDM or CLI? Is it the goal of Cisco to eliminate IOS/CLI access?   It has been awhile for me since I worked within firepower and FTD at that time was spoken of but not quite there yet for production deployments. What is the current status of FTD and obviously as asked above is my perceivement wrong? ... View more

Once PKG is installed on the SFR is there a way to reinvoke the configuration? I can manually do the network settings from configure mode but have no idea on where to manually set the domain name , domain lookup, NTP settings from the CLI???  ... View more

I created a static list for URL blacklist and applied to my ACP. I was under assumption that the security Intelligence settings override any rules defined within the ACP.   Just to see what traffic was getting through to my Allow_All rule with IPS defined I superceded it with a Block ALL rule which catched the URL that I specified to be blocked within the Security intelligence section. Very frustrating to say the least. What should be taking place here???  ... View more

Is it ok to use multiple user agents on the same subnet? I was thinking of using two seperate installations on to two seperate Domain Controllers (Same domain & Same subnet)  ... View more

Is it ok to run a snapshot for the FMC VM? It seems that if I were to take a snapshot the log file would continue to grow rapidly due to all the database writes pertaining to connection, host, discovery events etc  If completing a major version upgrade what would be the best way to backup and restore to that point in time? A full .vmdk backup and then using scheduled integrated backup instead of snapshots??? ... View more

I am using a laptop that is not part of a domain and is behind ASA 5545-X configured for firepower. I gain access to files from this machine as a consultant would by  using UNC \\servername\sharename and providing domain credentials for access. When viewing connection events I assumed that I would not have the domain account that I am using to IP mapping as I am not using to login to the domain etc This makes sense so I parsed the connection events by the IP address of the laptop that I am using expecting to not see any user mapping to this IP. However, what I found was that the mapping for my non domain joined laptop IP was associated with a differerent domain username that I am using.  The NETBIOS name pings to a different IP where the user that is being associated to my laptops current IP islogged in. How is it best to handle systems that are not joined to the domain where user agent name to IP mappings exist so that conflicts do not generate within the connection event logs ??? 192.168.1.178  (MYlaptopHostname) NetBIOS Name 5CG7021726   (NOT MY LAPTOP) (MAC ADDRESS IN RED BELOW) Device (Hops) sfrhostname.domain.org (0) MAC Addresses (TTL) NOT MY MAC 30:E1:71:82:77:48 (Hewlett Packard) (128) MY LAPTOP MAC 6C:88:14:0A:C8:D4 (Intel Corporate) (128) Host Type Host Last Seen 2017-04-07 09:40:20 (Time that My Laptop generated connection events ) Current User SOMEONE ELSE USERNAME (DOMAIN\SOMEONEELSEUSERNAME ... View more

I am trying to create custom Topologies for my ASA Inside zones at Hub and Spoke locations connected via IPSEC Tunnels.  I can define the Custom topology subnets but am only able to activate one at a time. Do I need to create a VPN Topology within the FMC for these Spoke Locations in order to assign and activate  custom topologies for these remote subnets? I have been able to discover these remote subnets but as soon as I click on topology(Network Map Secition) I can only have one subnet active at a time and the remaining say "Unassigned".   The spoke sites are not next gen ASA's as of this time but I am replacing to next gen. Anyone have any ideas on what I need to do to correct this ? ... View more