We have one FTD and configured the anyconnect, for anyconnect we have the Access Filter in Group Policy. in FMC connection event we can see just the traffic through the Access Control policy! But the Access Filter from anyconnect is for "ASA". the Question is how can I see the Permit or deny event from the Access Filter in the FMC?   Regards   Robin ... View more

Hi,  know anyone, how to active the smart Liciensing with ISE1K? I want to install the security License. I regestered the Router to the Smart Server, and do not how to download the Security license to the router...   Regards   Robin ... View more

I got the Setup again and again. Could someone tell me what is wrong with this machine?  You have chosen to setup a new Security Appliance. Continue? (y/n): y   Enforce strong password? (y/n) [y]: n   Enter the password for "admin":   Confirm the password for "admin":   Enter the system name:  FP4100   Supervisor Mgmt IP address : 10.9.18.88   Supervisor Mgmt IPv4 netmask : 255.255.255.0   IPv4 address of the default gateway : 10.9.18.1   Configure the DNS Server IP address? (yes/no) [n]:   Configure the default domain name? (yes/no) [n]:   Following configurations will be applied:     Switch Fabric=A     System Name=FP4100     Enforced Strong Password=no     Supervisor Mgmt IP Address=10.9.18.88     Supervisor Mgmt IP Netmask=255.255.255.0     Default Gateway=10.9.18.1     Ipv6 value=0   Apply and save the configuration (select 'no' if you want to re-enter)? (yes/no): yes   Applying configuration. Please wait. variable defaultIpBlock has no value specified   SAM configuration file is not Okay   System will reboot shortly! INIT: Sending all processes the TERM signal... dmserver: 492:dmserver_exit:Waiting for irq thread to exit. dmserver: 270:dm_scan_devices_irq:Error waiting on irq (select), error: Interrupted system call dmserver: 500:dmserver_exit:Waiting for fastirq thread to exit. Sending all processes the KILL signal... Saving random seed: Syncing hardware clock to system time WARNING from hwclock: The clock was in 11 minute mode, which normally means that something else, possibly an NTP daemon, has been setting the hardware clock.  Setting the clock with hwclock turns off 11 minute mode.  See hwclock documentation. Unmounting file systems:  umount2: Device or resource busy umount: /var/tmp: device is busy umount2: Device or resource busy umount: /var/tmp: device is busy /var/tmp:           c Unmounting file systems (retry):  umount2: Device or resource busy umount: /var/tmp: device is busy umount2: Device or resource busy umount: /var/tmp: device is busy /var/tmp:           c Unmounting file systems (retry):  umount2: Device or resource busy umount: /var/tmp: device is busy umount2: Device or resource busy umount: /var/tmp: device is busy /var/tmp:           c umount2: Device or resource busy umount: /var/tmp: device is busy umount2: Device or resource busy umount: /var/tmp: device is busy mount: you must specify the filesystem type mount: /var not mounted already, or bad option Please stand by while rebooting the system... [ 1566.198154] Disconnected SATA Storage device(sda) from PCI bus  [ 1610.034024] Restarting system. !!  Rommon image verified successfully  !! Cisco System ROMMON, Version 1.0.10, RELEASE SOFTWARE Copyright (c) 1994-2015  by Cisco Systems, Inc. Compiled Mon 11/30/2015 15:23:18.60 by builder Current image running: Boot ROM0 Last reset cause: ResetRequest DIMM Slot 0 : Present DIMM Slot 1 : Present No USB drive !! ..........BIOS has been locked !! Platform FPR-4140-SUP with 8192 Mbytes of main memory MAC Address: b0:aa:77:35:6f:2a find the string ! boot bootflash:/installables/switch/fxos-k9-kickstart.5.0.3.N2.4.01.116.SPA bootflash:/installables/switch/fxos-k9-system.5.0.3.N2.4.01.116.SPA Use BREAK, ESC or CTRL+L to interrupt boot. Use SPACE to begin boot immediately. Attempt autoboot: "boot bootflash:/installables/switch/fxos-k9-kickstart.5.0.3.N2.4.01.116.SPA bootflash:/installables/switch/fxos-k9-system.5.0.3.N2.4.01.116.SPA"   !!   Kickstart Image verified successfully   !! Linux version: 2.6.27.47 (security@cisco.com) #1 SMP Mon Dec 5 18:26:02 PST 2016 [    0.000000] Fastboot Memory at 0c100000 of size 201326592 Usage: init 0123456SsQqAaBbCcUu INIT: POST INIT Starts at Fri Jul 21 11:31:12 UTC 2017 can't create lock file /var/lock/mtab~234: No such file or directory (use -n flag to override) S10mount-ramfs.supnuovaca Mounting /isan 2500m Mounted /isan Creating /callhome.. Mounting /callhome.. Creating /callhome done. Callhome spool file system init done. Platform is BS or QP MIO: 31 FPGA Version 0x00010500 FPGA Min Version 0x00000600 Checking all filesystems..r... done. Checking NVRAM block device ... done . FIPS power-on self-test passed Unpack CMC Application software Loading system software Uncompressing system image: bootflash:/installables/switch/fxos-k9-system.5.0.3.N2.4.01.116.SPA Manager image digital signature verification successful C 11+1 records in 11+1 records out 8903 bytes (8.9 kB) copied, 4.617e-05 s, 193 MB/s snm mode on SUP INIT: Entering runlevel: 3 cmcmon: 159:cmclog_setlevel_module:CMC Log level cp: cannot stat `/isan/bin/chassis3.img': No such file or directory cp: cannot stat `/isan/plugin_img/fex.bin': No such file or directory cp: cannot stat `/isan/plugin_img/fexth.bin': No such file or directory cp: cannot stat `/isan/plugin_img/fex3.bin': No such file or directory --------------------- enabled fc feature --------------------- 2017 Jul 21 11:33:27  %$ VDC-1 %$ %USER-2-SYSTEM_MSG: CLIS: loading cmd files begin  - clis 2017 Jul 21 11:33:36  %$ VDC-1 %$ %USER-2-SYSTEM_MSG: CLIS: loading cmd files end  - clis 2017 Jul 21 11:33:36  %$ VDC-1 %$ %USER-2-SYSTEM_MSG: CLIS: init begin  - clis System is coming up ... Please wait ... System is coming up ... Please wait ... 2017 Jul 21 11:34:11  %$ VDC-1 %$ %USER-0-SYSTEM_MSG: Starting bcm_attach - bcm_usd System is coming up ... Please wait ... System is coming up ... Please wait ... 2017 Jul 21 11:34:18  %$ VDC-1 %$ %USER-0-SYSTEM_MSG: Finished bcm_attach... - bcm_usd 2017 Jul 21 11:34:18  %$ VDC-1 %$ %USER-0-SYSTEM_MSG: Enabling Filter on CPU port  - bcm_usd 2017 Jul 21 11:34:20 switch %$ VDC-1 %$ %VDC_MGR-2-VDC_ONLINE: vdc 1 has come online System is coming up ... Please wait ... nohup: appending output to `nohup.out'            ---- Basic System Configuration Dialog ----   This setup utility will guide you through the basic configuration of   the system. Only minimal configuration including IP connectivity to   the Fabric interconnect and its clustering mode is performed through these steps.   Type Ctrl-C at any time to abort configuration and reboot system.   To back track or make modifications to already entered values,   complete input till end of section and answer no when prompted   to apply configuration.   You have chosen to setup a new Security Appliance. Continue? (y/n): ... View more

Hi guys, I started with ISE PIC version 2.2. After I tried to config WMI with my AD(passive ID),  I got this failed Message: Successfully configured 0/1 DC Unable to run executable on <AD>, The IseExec remote execution functionality failed to read response I used the same AD to connect the other ISE, there are no problem. Could someone help me? or maybe there is a documentation about the "Unable to run executable on...". Regrads Robin ... View more