About dan hale

dan hale · ‎01-17-2019

HI Anthony, we do I just don't know if its overkill based on what was recommended. We only have a need for about 8 Agents and only need to view the call recordings. Not really much more than that. Thanks, Dan

dan hale · ‎01-17-2019

Hi, I'm having a hard time trying to figure out if we need just the basic Compliance recording license "CCX-11-CR-LIC" or something more. We have UCCX 11.5 and are looking to do call recordings on our agents. I think its pretty basic just need to make sure the calls are recorded and for the supervisors to have a web interface to view these calls. I understand that I will need to spin up a windows server and SQL server for the recordings. Does the above license include the front end media? Besides the above do we need to include anything else. I see some talk about Work Force Management and Quality Management servers...is that really needed in my case? Can the windows servers be installed on a physical server or is VMware/Hyper-V needed. Thanks, Dan

dan hale · ‎01-07-2019

Thanks Jonathan....that was exactly it. I didn't think about creating the DNS name in my local host file. Once I did the softphone registered! Thanks, Dan

dan hale · ‎01-01-2019

Hi All, I have a new build of CUCM version 12. I cannot seem to register my CIPC phone. Checked all the normal stuff. CM service is started, CTI service started, TFTP service started. I have the correct device programmed in CUCM and have the correct device name on my CIPC client. Unfortunately I'm setting this up remotely via SSL VPN (anyconnect) so the CIPC is the only device I'm testing with. I'm manually setting the TFTP servers (CUCM) into my CIPC. I can ping the CUCM from my PC that has the CIPC setup. When I look in the logs on the CIPC client I see that it downloads the CNF file but, the phone just sits and continually registers. It does mention that there are "no trust lists found" and I have factory reset the CIPC and deleted the CTL files. This install is in a non-secure mode. I went to RTMT and looked at the syslog viewer in the application logs and I never see any references to my CIPC. With this new install I'm also spinning up a new UCCX server and the CTI ports and Trigger needed for CUCM to communicate with UCCX seem fine those register with CUCM!!!! One thing that I noticed is that when the CIPC pulls the CNF file it lists CM servers as the host name and not the IP address. Within my SSL client I don't have a DNS server to resolve those names....could that be the problem? Can I just change from using the hostnames in CUCM to the IP address and would that fix my problem? If so any repercussions from changing from hostname to IP address? Thanks, Dan

dan hale · ‎11-20-2018

Thank you Balaji...we have a 5 site WAN with up to 10,000 wireless clients and about 3,000 wired clients. At each of the 5 campuses we have about 8 IDF's with about 4 CIsco Layer 2 network switches in each closet. I see that the SMC will from up to 25 Flow Collectors. Do we have to purchase 25 flow collectors or to we purchase one Part number: L-ST-FC-VE-K9 and that can be configured for say the FCVE-1000. "The Stealthwatch Management Console aggregates, organizes, and presents analysis from up to 25 Flow Collectors, the Cisco Identity Services Engine, and other sources" Thanks, Dan

dan hale · ‎11-20-2018

Hi we are looking at purchasing StealthWatch for VMware and to get started I need some clarification on what part numbers and how many per part. Cisco Stealthwatch Enterprise Data Sheet https://www.cisco.com/c/en/us/products/collateral/security/stealthwatch/datasheet-c78-739398.html For just the VMware appliance do I only need the following part numbers: Cisco Stealthwatch Flow Collector Virtual Edition L-ST-FC-VE-K9 Cisco Stealthwatch Management Console Virtual Edition L-ST-SMC-VE-K9 Cisco Stealthwatch Flow Sensor, Virtual Edition L-ST-FS-VE-K9 Would I just need one of each of the above? Can I just get away with 1 flow connector and 1 Management console? Thanks, Dan

dan hale · ‎09-20-2018

Thanks for the detail on this Arne!

dan hale · ‎09-17-2018

Hi we have a new installation of ISE version 2.4 in a distributed deployment with two nodes. We have a legacy WLAN that we use for IPADS that does mac authentication and uses AD suthingication via PEAP on ACS 5 that I need to migrate to ISE. Previously I had to generate a Certificate from one of our domain controllers to allow the IPAD's to accept the certificate and send out to the IPADs. Has there been an option in ISE that I can just allow the IPAD's on the network without verifying the certificate, such has on our windows computers via Group Policy I have that option disabled. And if not is there any updated online walk thru to to generate this certificate with Windows Active Directory IIS and install on ISE? Thanks, Dan

dan hale · ‎07-25-2018

Hi, I'm looking at purchasing dual 2110 to run in HA mode to replace two Cisco ASA 5510's in HA. Is there any additional licenses needed to run the 2110's in ASA mode? I assume that depending on the version of version of code I'm running on the ASA 5510's that I can upgraded them to the same version of ASA code that the 2110 will be running and simply upload the config over? Thanks, Dan

dan hale · ‎07-25-2018

Thanks Yogesh I already have SI enabled. Thanks, Dan

dan hale · ‎07-23-2018

Hi All, I have a 2120 running in FTD mode with the IPS and AMP licenses and an FMC all on version 6.2. I setup the IPS and AMP (file policy) based on the configuration guide. On my Access Control Policy I do have both the file policy and IDS checked to inspect when internal traffic goes out to the internet. There are some weird connection events that lead me to believe some internal hosts maybe compromised when I look in the connection events...some computers talking to other countries that should not. Besides setting up Geofencing to deny internal traffic to those countries is there a better report I can run besides looking at the connection events? Thanks, Dan.

dan hale · ‎07-08-2018

Hello, all I have a customer that really likes the ASA mode but, we have a need for an IPS. On the Cisco 2100 is it possible to run it in ASA mode and also have the firepower sensor for running IPS/AMP? Thanks, Dan

dan hale · ‎04-08-2018

Hi, I'm running into an issue on my CUCM 8.6 when I try to access the other node from the CUCM serviceability.... "Connection to the server cannot be established(unable to access Remote Node)" I see that its been discussed at great length on the forum and I looked at the Tomcat certs and they have expired... https://supportforums.cisco.com/t5/collaboration-voice-and-video/quot-connection-to-the-server-cannot-be-established-unable-to/ta-p/3135301 My question is regenerating the tomcat certs and restarting the Tomcat service will that impact phone calls? We do not use any UCCX or extension mobility....we do use a product Synapps for paging and message notification. Thanks, Dan

dan hale · ‎03-29-2018

Thanks for pointing me in the right direction however, it looks like creating BVI's is not supported on the 2100's. "you cannot configure bridge groups on Firepower 2100 series or Firepower Threat Defense Virtual devices." https://www.cisco.com/c/en/us/td/docs/security/firepower/622/fdm/fptd-fdm-config-guide-622/fptd-fdm-interfaces.html#id_35464 Thanks, Dan

dan hale · ‎03-29-2018

An update on this...looks like the 2100,4100, and 9300 do not support redundant interfaces in FTD mode. "• Redundant interfaces are not supported on the Firepower 2100, Firepower 4100/9300 chassis" https://www.cisco.com/c/en/us/td/docs/security/firepower/621/configuration/guide/fpmc-config-guide-v621/interfaces_for_firepower_threat_defense.pdf I imagine if they were in ASA mode they would. Thanks, Dan

Date Registered	‎02-16-2009 06:02 PM
Date Last Visited	‎01-18-2019 04:06 AM
Total Messages Posted	264
Total Helpful Votes Received	5

Re: Need to Understand what the diffren...

Need to Understand what the diffrent op...

Re: CIsco IP Communicator Phone will no...

CIsco IP Communicator Phone will not re...

Re: Stealthwatch need VMware licensing ...

Stealthwatch need VMware licensing and ...

Re: Certificate for IPAD and PEAP still...

Certificate for IPAD and PEAP still nee...

2110 in ASA mode need additional licens...

Re: Detecting Malware and Suspicious ac...

Detecting Malware and Suspicious activi...

ASA mode on 2100 with Firepower Sensor?

CUCM Serviceability "Connection to the...

Re: Firepower NGFW 2110 interfaces can ...

Re: Firepower NGFW 2110 two Trunk/sub-i...