I want to limit bandwidth per application. I have read the suggestion to limit it in access-policies - > applications.   I see that some applications limit the bandwidth restriction option (example facebook and media), but not all of them.   How can I enable that limit for other applications? or only certain type of applications can be limited?   thanks!     ... View more

I have a question, when you say "after"? Is it after some minutes, days or months, or more time? thanks! ... View more

Hi, I am installing AMP for endpoints in 90 servers. How can I estimate how much bandwidth will be consumed?   Thanks! ... View more

I want to send emails when a firewalls with vpn detects that a VPN is down. I have this message in the cisco asa buffer: 4|Nov 21 2016 12:04:32|113019: Group = 190.81.188.124, Username = 190.81.188.124, IP = plm-sdu-gsni-1-internet, Session disconnected. Session Type: LAN-to-LAN, Duration: 0h:07m:43s, Bytes xmt: 25740, Bytes rcv: 25740, Reason: Lost Service I also receive this message as an email: <163>Nov 21 2016 12:04:32 plm-cagw-gsni-10 : %ASA-3-713123: Group = 190.81.188.124, IP = 190.81.188.124, IKE lost contact with remote peer, deleting connection (keepalive type: DPD) But I would like to receive the message using the name , not the IP address. How can I do that? This is part of my configuration: name 190.81.188.124 plm-sdu-gsni-1-internet logging enable logging timestamp logging list lista01 level informational class vpn logging list lista01 message 713259 logging buffer-size 128000 logging console warnings logging monitor warnings logging buffered warnings logging trap lista01 logging history warnings logging asdm debugging logging mail lista01 logging from-address tu_amigo_el_cagw10@ecampus.com.pe logging recipient-address slizarraga@pe.ibm.com level errors logging recipient-address jnahuero@pe.ibm.com level errors logging device-id hostname logging host sbb ir-syslog logging class auth buffered debugging logging class webvpn buffered debugging logging class svc buffered debugging logging class ssl buffered debugging logging message 111009 level errors ... View more

I have a 3750X stack in my datacenter that is connected with two interface to an Alcatel Core Switch. I have one interface in shutdown state and the other up, so all traffic goes through this last interface. My Cisco stack runs MSTP and the Alcatel switch runs RSTP. Last weekend I changed the mode in the Cisco stack to RSTP but I lost communication with the Alcatel switch. The port that connected to the Alcatel switch showed in blocked mode. Is there any compatibility issue or special command I need to configure in order to get this 2 devices to talk and work correctly? Thanks for your help!! This is the port configuration: interface TenGigabitEthernet1/1/1 switchport trunk allowed vlan 101,116-119,125,231,950 switchport trunk encapsulation dot1q switchport trunk native vlan 231 switchport mode trunk load-interval 30 no cdp enable end ... View more

I am using an ACS that uses an external identity store which is an AD server, I have configured to use LDAP. I want to limit the max sessions per user and per group, but the limit only works on the Identity Groups, and non of my users are in Identity groups.  I thought I had 2 options:  - Limit in my external identity store (it seems not possible)  - Associate my LDAP groups to my Identity group How can I implement the 2nd option?? Thanks for your help!! (I saw a forum note that ask pretty much the same, but the link does not show how to make this association).  I have an attach with more info. ... View more

I have many users in the ACS that are used by a site-to-site VPNs, they are VPNs from different customers. I would like my customers to be able to change their users passwords by themselves. I am able to create the changeuserpassword role in the ACS, but it has access to change any users password. Is there a way that I can restrict the administrator so it can only change (and see), the passwords of SOME of the users? thanks!! ... View more

I have inserted a C3850-NM-10G module in a WS-C3850-48T but the ports are not being recognized by the switch. I obtained this log: *Jun 21 18:00:31.577: %PLATFORM_PM-6-FRULINK_UNKNOWN_INSERTED: Unsupported FRU module inserted in slot 1 This is the os version of the switch: Switch Ports Model SW Version SW Image Mode ------ ----- ----- ---------- ---------- ---- * 1 56 WS-C3850-48T 03.07.03E cat3k_caa-universalk9 INSTALL 2 56 WS-C3850-48T 03.07.03E cat3k_caa-universalk9 INSTALL It is strange because I also tried with a similar module in a WS-C3850 3.03.05 version and it worked allright. Thanks for your help! ... View more

I bought a N9K-C9372PX-E= by mistake. It is similar to N9K-C9372PX-E (without "=") ,  because the the first one (with "=") is a spare, that does not include installation kit, power supply or fans. I am buying those 3 parts, buy I want to check if I need to also buy the software / license for the devices, I want to use it with NX-OS (not for SDN). Thanks for your help! ... View more