About m.yost

m.yost · 12-01-2023

I have a customer that we are doing an ISE-PIC install for as they need to upgrade FMC past where the windows agent is supported. The problem we have is that the customer is running ESXi v8.0 and the only ISE-PIC version to support that version of E...

m.yost · 11-28-2023

FMC: v7.3.0 (build 69)FTD 1120: v7.2.5ISE-PIC: 3.2.0.542, Patch 4We have a new integration between ISE-PIC and FMC that we are trying to use in policy. I can see some users are shown in the Unified Events, but many entries show as "Not Found". For on...

m.yost · 02-02-2023

Going to be starting an IOS XE SDWAN deployment where the primary WAN connection is cablemodem and secondary is cell for remote sites. With old school routing, we would use EEM to detect when the primary connection was down and admin up the cellular...

m.yost · 05-23-2022

FMC: 7.1.0.1 FTD: 7.0.1.1 Having a weird issue with a new turn up of AnyConnect off an FTD 1100 managed by FMC. Periodically when users login to VPN, they will get placed into the Default Group Policy on the FTD and not into their correct group po...

m.yost · 08-14-2019

If we are using an ISR 4000 series as a DMVPN hub (DMVPN Phase 1) and want to run a Firepower sensor on a UCS-E series compute module within that module, will the sensor see spoke to spoke traffic bouncing off the hub. If so, are we limited to IDS m...

m.yost · 02-03-2023

Thanks, this is the confirmation I was looking for. The other document I was reading seemed to indicate the interface still exchanged BFDs and PMTUD but the document you referenced says the radio will be down.

m.yost · 02-02-2023

Thanks for this. Just did a little bit of reading on this and is sounds like the cell interface is still active, but there is just minimum traffic on it (BFDs hello's which can be lowered and PMTU discovers which can be disabled). The customer is v...

m.yost · 05-23-2022

I'm having eerily similar issues with my FTD 1140 running 7.0.1.1 code. The bug says that the output of the "show vpnsession-db anyconnect" command will show the correct mapped Group Policy however in my situation it shows the Default Group Policy. ...

m.yost · 08-06-2019

@Kureli Sankar I am looking to run Snort on a CSR1000V. We would be terminating Phase 1 DMVPN tunnels on the CSR1000V which would be the hub router. Throughput requirement is pretty low so we would probably be OK with 100M or 250M throughput howeve...

m.yost · 08-02-2018

Ahh ok... We did talk about telling the cameras to record in a different location but then having to wait 30 days for the old video to age out. He just didn't give me as much detail as you did. The problem is that the project can't wait 30 days so...

Member Since	‎08-24-2004 02:50 PM
Date Last Visited	‎12-11-2023 08:05 AM
Posts	52
Total Helpful Votes Received	25

User Statistics

User Activity

ISE-PIC and domain functional level

FMC correctly seeing some ISE PassiveID users, other show Not Found

SDWAN with cellular interface up when primary WAN down

AnyConnect group policy via RADIUS Class attribute inconsistent

Firepower Threat Defense on ISR - DMVPN Phase 1 spoke to spoke traffic

Re: SDWAN with cellular interface up when primary WAN down

Re: SDWAN with cellular interface up when primary WAN down

Re: CSCwa08262 also affect FTD

Re: Snort IPS on ISR, ISRv and CSR - Step-By-Step Configuration

Re: Moving camera storage to different directories