You're welcome. Yes AMP4E can replace traditional antivirus products. If you do not have AMP for Networks licensing on your ASA Firepower service module or FTD device then they cannot avail themselves of Threatgrid by themselves. The automated file upload requires an AMP for Network license. ... View more

I've definitely run into that issue with ISPs. Most of the ones I've worked with have an arp timeout of 1 hour. If you haven't opened a ticket with them proactively it takes about that long to get an actual technician ...at which point you end up saying "never mind it just started working". If you can get the tech on the line in advance you can cut down the outage time significantly. ... View more

AnyConnect 4.x Plus and Apex licenses are per unique user and may be used on multiple devices. If they were initially issued as PAK-based licenses, you need to request Cisco licensing provision them as Smart licenses for use with FTD devices. (FTD devices use Smart licenses exclusively while ASAs (except ASAv) use PAK-based.) Detailed instructions on how to request that can be found here: https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/200191-AnyConnect-Licensing-Frequently-Asked-Qu.html#anc56 ... View more

I've never heard of the Arconis product before. This is a Cisco forum and we mostly focus on Cisco products here, primarily in the networking side of things as opposed to host/server-based tools. (Cisco AMP for Endpoints being an exception to that.) ... View more

You should start by reviewing the Cisco collateral material found here: https://www.cisco.com/c/en/us/solutions/security/ransomware-defense/index.html#~stickynav=2 After reading through that, you can post more focused questions if you have any. ... View more

The GUI and cli credentials are separate - even if you are using the username "admin" for each. Password recovery steps for the various scenarios are described in detail here: https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118631-technote-firesight-00.html ... View more

"casuer" is an internal username that the Firepower code uses when making changes to the system via a deployment job. You can see it in the underlying Linux OS as follows: Cisco Fire Linux OS v6.4.0 (build 2) Cisco Firepower Management Center for VMWare v6.4.0.4 (build 34) admin@fmc:~$ sudo su - Password: root@fmc:~# cat /etc/passwd root:x:0:0:Operator:/root:/bin/sh bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin mysql:x:27:27:MySQL:/var/lib/mysql:/sbin/nologin nobody:x:99:99:nobody:/:/sbin/nologin sshd:x:33:33:sshd:/:/sbin/nologin www:x:67:67:HTTP server:/var/www:/sbin/nologin sfrna:x:88:88:SF RNA User:/Volume/home/sfrna:/sbin/nologin snorty:x:90:90:Snorty User:/Volume/home/snorty:/sbin/nologin sfsnort:x:95:95:SF Snort User:/Volume/home/sfsnort:/sbin/nologin sfremediation:x:103:103::/Volume/home/remediations:/sbin/nologin admin:x:100:100::/Volume/home/admin:/bin/sh casuser:x:101:104:CiscoUser:/var/opt/CSCOpx:/sbin/nologin lamplighter:x:110:110::/var/opt/lamplighter:/bin/sh user1:x:1000:201::/Volume/home/user1:/bin/bash root@fmc:~# ... View more

As long as you have an (outside,outside) NAT rule the remote access VPN users will get Internet access just fine. ... View more

You should be able to copy the image to your ASA and recover from that image. Why are you trying to setup a very very old and past-end-of-life module though? It does not provide effective security against modern threats and no current certification track requires that you know it. ... View more

Sorry I have never worked on the Nutanix platform and haven't seen any Cisco documentation advising on it either. You'd be better off asking with Nutanix than here at a Cisco forum. ... View more

The interface I described is in addition to the normal one(s) you use for basic flows and management. Because it is a dedicated physical Network Interface on a dedicated vSwitch it does not interact with or affect any other VMs on the server. If you are a partner, please refer to the Stealthwatch POV build guide on Salesconnect. It has 125 pages of details, including the small excerpt I provided earlier. ... View more