Hi, OpenFlow is supported on Nexus 3000 series, but what are other requirements that the switch must have in order to configure it for OpenFlow and point it to a SDN controller. NX-OS version? Licensing? Software install? etc? Thank you! -rya   ... View more

Hi, I'm building a SDN OpenFlow lab for a customer that will either the Nexus 3048 or the Cisco Catalyst 2960-x which support OpenFlow.   The SDN controller we will use will the HPE/Aruba VAN SDN Controller, which is very popular and powerful.   My question is, will the Nexus 3000 / Catalyst 2960-x switches work with the HPE/Aruba VAN SDN Controller? I'm assuming it does since it supports OpenFlow version 1.0 and 1.3, but I want to be sure before we start buying any Cisco hardware.   Thank you!   -rya ... View more

Hi, Is there any clear documentation and steps for downgrading the Cisco ASA 5506-X FirePower firmware from 6.0 back to 5.4. The 6.0 code is very unreliable and buggy. Not ready for production networks. Any help would be great. Thank you! - rya ... View more

Hi, Does Malware Cloud Lookup work reliably on Cisco ASA 5506-X running FirePOWER servicrs? When I enable that option with a file policy I notice that the deposition is listed as Unavailable most of the time for files I know are malware. I know the documentation say it is normal behavior, but I don't think it is very reliable. I'm trying to be get a sense of what to expected and what others have experienced? Thank you! - rya ... View more

Hi, I have a Cisco ASA 5506-X with FirePOWER services running OS 6.0.0 (which supports SSL inspection). I am managing this firewall through the ASDM. The ASA itself is running ASA OS version 9.5(1). The ASDM version is 7.5(2) I am encountering a lot of unreliable issues and bugs with this firewall running OS 6.0.0.  Here are the biggest issues: URL Filtering hangs the SFR module for traffic forwarding: When I configure URL filtering for blocking based on a category such as Social Network and adding URLs like cisco.com everything works as expected from the clients. However, after some time, all users will lose access to services on the Internet as if the SFR module hangs. But I can console and access the FirePower pages without any problems. I have to reboot the SFR module and everything works ago. CPU and memory resources are good. I can repeat this process several times and this seem to be bug. Even on other ASA SFR units. SSL inspection is not reliable compared to the ASA running the CX module which works great.  I setup SSL inspection, imported the CA in our user's web browsers and when I access Facebook.com ... we see our cert.  However, if I want to block Facebook posts, comments, chat, etc.   Nothing works!!!!  Even though it is using the correct cert. I even generated the troubleshooting logs, but they don't provide any useful info I can use to understand what is going on. Are there any known bugs or problems with Cisco ASA 5506-X with FirePOWER services running OS 6.0.0? Or is there anything I need to do extra on this ASA to get everything to work reliably? I don't see much resources and I'm not happy with this product. The PAN, FGT, and the ASA using CX are much better NGFWs compared to the ASA SFR unit. Please help or guide me in the right direction? Thank you! -rya ... View more

Hi, I have a question which I'm not sure if Cisco ASA setup with L2TP/IPSec can accomplish. Right now I have a Cisco ASA setup for L2TP over IPSec with LDAP authentication working. We are also using a pre-shared key. What I want is to setup is different group policies on the Cisco ASA that are mapped to a particular LDAP group. These group policies will have different split tunnel lists (or filters) for what networks that user can access based on the group they are assigned to. I know this is possible with SSL VPN and Client IPSec. Is this possible with a L2TP/IPsec setup on a Cisco ASA? If so, what configuration do I need to accomplish this? Thank you! -rya ... View more

Hi, Are there any trial licenses for the ASA 5506-X for the using IPS, URL, Apps, and AMP subscriptions? What I loved about the ASA 5500-X series running the CX module, was that it had a trial license built-in to use those services.  Great and about time Cisco. What about the the ASA 5506-X with FIREPOWER? Thanks in advanced! -rya ... View more

Hi, I never set this up before or know if this is possible.  Can I setup email alerts on Cisco UCM 8.X when a scheduled backup fails? I specified the SMTP host under the OS administration page, but that is it. Please let me know if this is possible and if so how I can set this up? Thank you in advanced! -rya ... View more

Hi, We have a Cisco ISA570 running the latest firmware version of 1.2.19. However, after running several Heartbleed tests, we found that it is vulnerable to this threat.  It's not even listed as an affected product on the Cisco Security Advisory page.   We had to disable SSL VPN services as a workaround, but that disables remote access for our users which isn't an acceptable option for long term. What do we need to do to get our ISA570 updated to fix this active threat? Thanks in advanced! -rya ... View more