About Garry Cooper

Garry Cooper · 03-26-2026

Previously, we used eStreamer to send logs to an eNcore client on the syslog server. Now that eNcore has reached end-of-life, what is Cisco’s recommended approach, and how can we configure log forwarding to ensure our cybersecurity systems continue r...

Garry Cooper · 02-11-2026

We are attempting to allow Microsoft Intune traffic through our Firepower appliance running version 7.7.10. However, the traffic is being inspected by Snort and is reported as blacklisted. Even though the relevant objects, URLs, FQDNs, application fi...

Garry Cooper · 02-02-2026

In the process of getting Microsoft Intune workig but hit a wall with the cleints hitting"Drop-reason: (snort-blacklist) Packet is blacklisted by snort, Drop-location: frame inspect_dp_snort_snp_drop_frame_wcaller:61 flow (NA)/NA"A prefilter is no go...

Garry Cooper · 12-05-2024

We are deploying an external wireless mesh lan and will be leveraging Catalyst Centre.How can I add access points to a site map so we can see where the AP's are located on the street for a support perspective.Seems to only support a floor map, which...

Garry Cooper · 11-13-2024

We are looking to deploy 9124 connected to a 9800 Cloud controller in a mesh configuration.Can someone explain the process to get the MAP connected to the RAP.We have the RAP setup and all the mac addresses AAA is setup on the wlc.Do the MAP's need t...

Garry Cooper · 04-01-2026

We have resolved the logging issue. thanks fro all the replies.Option we used was in the advanced option within the ACP and created an Action alert this pushes the logs to the syslog server and includes the intrusion events.

Garry Cooper · 02-13-2026

Thanks for the reply ManabansNot the reply I want but expected this.Cisco needs to fix the logic as its not a usable process having to create multiple rules to achieve one goal.

Garry Cooper · 02-02-2026

Thanks MartinThats has helped looks like we have an issue with fqdn resolution so I have logged this with TAC.

Garry Cooper · 02-07-2025

So when our DNAC was setup we have access to the CIMC once into the menu you can launch a KVM. you then can login to the CLI maglev-master ( as it was called) see the attached image.This interface allows you to make changes to the config.

Garry Cooper · 12-05-2024

Flavio.Thanks for the replyThe only problem with that is the mesh covers alot of area, and was hoping you could use it the same as in the Global map in dnac.This allow dynamic zooming.

Member Since	‎07-12-2011 03:22 AM
Date Last Visited	‎04-02-2026 12:35 AM
Posts	116
Total Helpful Votes Received	26

User Statistics

User Activity

How can we forward logs from our Firepower 3130 to a syslog server?

Microsoft Intune Traffic Blocked by Snort Despite ACP Configuration

Firepower Blacklisting Traffic

Add Wireless AP to map in Catalyst Centre.

Cisco AP MAP Requirements

Re: How can we forward logs from our Firepower 3130 to a syslog server

Re: Microsoft Intune Traffic Blocked by Snort Despite ACP Configuratio

Re: Firepower Blacklisting Traffic

Re: Need to change a route in DNAC but getting an Error.

Re: Add Wireless AP to map in Catalyst Centre.