About borman.bravo

borman.bravo · 01-05-2021

We have a client that wants to migrate their ASA 5525X AnyConnect configuration to an Firepower 2130 running on FTD code, they have these feature currently enabled for AnyConnect: Dynamic Access PoliciesHost ScanSAML SSO Last summer I had another cus...

borman.bravo · 05-20-2020

Hello everyone, I was planning on migrating my ASA 9.8 to TLS 1.2, the process itself seems pretty simple but was wondering if anyone had any experiences with this, I understand AnyConnect and ASDM services will be affected by this, any recommendatio...

borman.bravo · 12-09-2019

Can someone please confirm if the Firepower user agent 2.4 supports TLSV1.2? I disabled TLSV1.0 in my Windows Domain Controller 2016 and I'm not getting any mappings anymore, thank you.

borman.bravo · 12-12-2016

I understand the Nexus 7000 does not perform packet fragmentation per design. I have a L2 VPLS circuit providing L2 VLAN extension between Data Center A &B coming in directly into an interface in a Nexus 7009 that restrict packets size to 1460, is th...

borman.bravo · 12-09-2015

Hello all, wanted to confirm an EIGRP - OSPF mutual redistribution behavior which I tested in my lab, only question I had is when injecting EIGRP 170 routes (redistributed from another router) into an OSPF process, these injected routes do not appear...

borman.bravo · 01-13-2021

Richard, just wondering which image version CSR you used in EVE-NG, I've tried the same configuration and cannot get the adjacency UP even though site is UP on each site. Both CSRs display the "No, overlay DIS not elected"Thank you

borman.bravo · 01-05-2021

Thanks Rob, for "anyconnect modules are all supported as of 6.7" is this on the FMC or non-FMC managed?

borman.bravo · 01-05-2021

Hi Marvin, could you please clarify what you mean by "although they are exposed via the REST API" can I configure and maintain these features (DAP and Hostscan) via the API tool for anyconnect? is this API on the FMC or FTD? thank you

borman.bravo · 05-20-2020

Thanks! I meant TLS 1.2 on the ASA, not DTLS at the moment: #ssl server-version tlsv1.2#ssl client-version tlsv1.2

borman.bravo · 04-29-2020

Yes, that is my understanding as well now, was informed by TAC that ISE-PIC was the recommended approach...either that or replace with Palos :)

Member Since	‎11-20-2012 11:30 AM
Date Last Visited	‎01-22-2021 12:09 AM
Posts	29
Total Helpful Votes Received	21

User Statistics

User Activity

Anyconnect features support on newest FTD code

Cisco ASA TLS update to 1.2

Cisco Firepower User Agent support for TLSv1.2

Nexus 7000 Packet Fragmentation to lower MTU

EIGRP To OSPF Redistribution Question

Re: OTV Multihomed Issue

Re: Anyconnect features support on newest FTD code

Re: Anyconnect features support on newest FTD code

Re: Cisco ASA TLS update to 1.2

Re: Cisco Firepower User Agent support for TLSv1.2