About Matthew Martin

Matthew Martin · 08-17-2023

Hello All,Two - ASA 5525-X'sCurrent Version: 9.4(4)20Upgrade Version: 9.14.4I got the zero downtime upgrade steps from here: https://community.cisco.com/t5/network-security/asa-zero-downtime-upgrade/td-p/2154357One thing I'm nervous about is the IP A...

Matthew Martin · 06-05-2023

Hello All,FMC v7.0.5Very new to Firepower (*coming from ASA) and I'm setting up an External Auth using a MS Active Directory. Following a guide on youtube, I configured the LDAP server in order to allow a specific group in our AD to login to the FMC ...

Matthew Martin · 02-06-2023

Hello,I noticed last week this IP Address attempting to VPN into our system. I noticed in our ISE LiveLogs this IP Address attempting to connect 100s of times a minute.In an attempt to stop this address from even attempting the VPN, I looked on our A...

Matthew Martin · 12-05-2022

Hello All,ISE v2.7 patch 3I am looking to install the latest Patch for v2.7. I noticed under Administration > System > Upgrade there's a message that says "Deployment is not healthy. Check the health in HealthChecks page . Click continue to go to the...

Matthew Martin · 11-23-2022

Hello All,ISE v2.7I just uploaded a new wildcard DigiCert certificate to ISE with the Role of Guest Portal. I uploaded the new wildcard cert + the private key that my manager gave me. I checked the Allow wildcard certs checkbox and everything appeare...

Matthew Martin · 08-23-2023

Just an update. Did the Failover test last night and it ran perfectly.Today I uploaded 9.14 to both ASA's, updated the boot variable and then reloaded the Standby which is now running 9.14.Tonight we will failover to the new version, we'll run the re...

Matthew Martin · 08-22-2023

Hey Marius, one more question for you.The folks above me are nervous about the upgrade since our eCom site runs behind this and they want to phase this upgrade out over a few days.... This is kind of the plan they came up with, is this viable?Basical...

Matthew Martin · 08-18-2023

Hey Marius, thanks for the reply!Ok great, that's what I was hoping.Not sure if we have any spare public IP Addresses to use on that standby "outside" interface. If we do, I'll see about assigning one. But, otherwise it sounds like not having one on ...

Matthew Martin · 02-17-2023

Yes, but you have to get the 8851 Multi-Platform version. But, we ended up returning them, because at the time (*don't know if this has changed) the phone was unable to do a Zoom phone directory search. So basically, if you didn't know the person's e...

Matthew Martin · 02-08-2023

Thanks Rob, I created a network object-group and inserted a couple more IPs that I noticed in ISE, which was hitting our outside interface frequently and attempting to auth through VPN. I then created the deny ACL and applied the network object-group...

Member Since	‎03-30-2011 12:34 PM
Date Last Visited	‎08-30-2023 12:33 AM
Posts	816
Total Helpful Votes Received	111

User Statistics

User Activity

ASA Upgrade Failover Pair - IP Addressing

FMC - External Auth Using a Specific AD Group

Block an IP Address Trying to Brute Force into VPN

ISE Health Checks

DigiCert with Guest Portal - Not Trusted?

Re: ASA Upgrade Failover Pair - IP Addressing

Re: ASA Upgrade Failover Pair - IP Addressing

Re: ASA Upgrade Failover Pair - IP Addressing

Re: Using CP-8851 as Multi-Platform Phone

Re: Block an IP Address Trying to Brute Force into VPN