About Akhtar Samo

Akhtar Samo · ‎02-07-2016

May I know if there are any docs on how all the solutions interact and integrate ? AMP Private Cloud Virtual Appliance (AMPv) public AMP cloud Firepower Management Center (FMC) ThreadGrid 5000 or AMP Threat Grid cloud Some options in my mind 1. firepower will be managed through FMC 2. For Dynamic File Analysis(File policy) on firepower using on-prem sandbox; TG5000 will integrate with FMC (system also does public AMP cloud lookup to check if the file has been submitted before or not) 3. AMP endpoint agents will be managed using AMP Private Cloud Virtual Appliance (AMPv) or public AMP cloud 4. AMPv will integrate with FMC to feed endpoint data 5. Threat Grid file analysis for the AMP Virtual Private Cloud Appliance will be available in early 2016 upon integration with the Threat Grid On-Premises Appliance. Is this part of 6.0 ? Regards, Ak

Akhtar Samo · ‎02-02-2016

Hello, Wondering if there is an updated version of below document ? and is it needed to run pxLog Application Installed on Tomcat 7 with MySQL Version 5 or I can make the use of ISE pxGrid node. ISE Version 1.3 pxGrid Integration with IPS pxLog Application - Cisco Regards, Akhtar

Akhtar Samo · ‎01-28-2016

Hello, may I know if it's possible to exempt a URL from IPS inspection? If yes can it be done without url filtering license? regards, Akhtar

Akhtar Samo · ‎11-23-2014

Hi, We are into a situation where we need to authenticate users of two domains and these two domains are completely independent (no common DNS server). ISE is not able to resolve one of the domain using the DNS server settings and Adding a host entry for the domain name is not sufficient since Kerberos, GC and LDAP SRVs need to be resolvable as well. From what I know ISE 1.3 should supports disjointed domains and there is no requirement for ISE to have 2 way trust relationship with domains. Please share your experience if someone has faced similar situation before. Regards, Akhtar

Akhtar Samo · ‎07-26-2014

Very helpful post Nazmul. Had a query. We have ordered 2 x 8130 and 1 x DC-1500, want to know what will be the default RNA/RUA license capacity ? Akhtar

Akhtar Samo · ‎03-20-2014

Hello, I am trying to implement macsec only for switch to host segment. I am following below document but still the user is not able to connect. http://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/117277-config-anyconnect-00.html The only difference in the topology is below, i have two switches. Host<-------macsec------->Switch---->Switch---->ISE The host is repeatedly getting username/password prompts. Regards, Akhtar

Akhtar Samo · ‎03-12-2014

We trying the same commands on 3750-x switch but its not available. Even we can't MKA policy command on it and we are running the ip base image. Any suggestions ? Regards, Akhtar

Akhtar Samo · ‎03-11-2014

Dear All, We are trying to enable Macsec (switch to host) on switchports but couldn't find following commands. We are running 15.0(2)se4 IPBASE image. Switch(config-if)# macsec Switch(config-if)# mka policy xx Both the above commands are not available. I was able to create the MKA policy on the switch in the global configuration mode. As per below guide MACsec is supported on IPBase images, dont know why above commands are not there. http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/15-0_1_se/configuration/guide/3750xcg/swmacsec.pdf Regards, Akhtar

Akhtar Samo · ‎02-11-2014

Hello, Is it possible to get Any Connect Premium demo license ? I can only find it for Mobile only. Regards, Akhtar

Akhtar Samo · ‎11-27-2013

Thanks. The problem in implementing CoA and MAB is when it comes to customers buying ISE and having a multivendor environment (Juniper/Nortel switches) are left with only ISE's authentication functionality on end points. I know they have an option for IPEP but that doesn't make sense for a client having high number of non-cisco switches connected to end points. Regards, Akhtar

Akhtar Samo · ‎11-24-2013

Is there any update on CoA support on ASA ? Any plans to make CoA feature as open standard ? so that customers having non-Cisco products can benefit from advanced ISE features such as Posture assessment. Regards, Akhtar

Akhtar Samo · ‎05-28-2013

Hi Steve, We dont want to disable the redirect, we want to stop wlc from listening/responding on http port because of security reasons. We will inform the user to directly open the web auth page on https instead of http. Regards, Akhtar

Akhtar Samo · ‎05-28-2013

Hi, May i know if its possible to disable the port 80 service on WLC used for user web authentication page. So currently the user is using http://1.1.1.1 and is redirected to https://1.1.1.1/login , so we want to disable http service on the wlc so that the user gets no service on it, but only in case he directly types https:// the authentication page should open. Akhtar

Akhtar Samo · ‎05-28-2013

Hi Nicholas, May i know if its possible to disable the port 80 service on WLC used for user web authentication page. So currently the user is using http://1.1.1.1 and is redirected to https://1.1.1.1/login , so we want to disable http service on the wlc so that the user gets no service on it, but only in case he directly types https:// the authentication page should open. Akhtar

Akhtar Samo · ‎02-24-2013

I upgraded from 5.2.1 to 5.2.2 around 10 days ago, but got the False alert today. It seems the problem is not fixed in 5.2.2. How are you taking this up further ? Regards, Akhtar

Date Registered	‎02-11-2010 12:59 PM
Date Last Visited	‎08-03-2018 03:00 AM
Total Messages Posted	124
Total Helpful Votes Received	6

Re: AMP endpoints/ESA, ThreatGrid

pxGrid query

Hello,

Hi,We are into a situation

Very helpful post Nazmul.Had

MACSEC switch to host not working

We trying the same commands

MACsec on Cat 3750G switches (switch to...

ASA 5520 - SSL VPN (Anyconnect) Licensi...

Re: ASA 9.0 support for CoA

Re: ASA 9.0 support for CoA

web authentication on wlc

web authentication on wlc

Re: Web Authentication on WLC (wireless...

Re: ANM 5.2.1 Device Down False Alarms