Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Marvin Rhoads
Marvin Rhoads
Member since
06-28-2001
.jpg){kind=icon}
Hall of Fame Master
CCNP Security (CCIE Sec. written June 2017, one lab attempt so far!), Fire Jumper, Cisco Support Community Hall of Fame and VIP x6. Passionate about solving problems in network security and helping others learn to do the same.
15353
Posts
13904
Helpful
2887
Solutions
Recent Badges
Awards
02-22-2019
07:07 PM
For non-blacklisted configuration commands that are not exposed via the FMC GUI, you use a FlexConfig to push the commands to the device.
... View more
02-22-2019
09:17 AM
ASA 5585-X with Firepower service module? With URL filtering license?
If so, the URL filtering to allow the Microsoft list should work fine - that's what it's designed to do.
... View more
02-22-2019
12:21 AM
@InTheJuniverse ,
As @ngkin2010 correctly mentioned, you need the Security Plus license for an ASA 5506 to enable Failover for HA.
The Control license is for the base level functionality of the Firepower service module. It is a prerequisite for the other Firepower features which each require additional licensing (IPS, URL Filtering and Malware).
... View more
02-22-2019
12:17 AM
@zekebashi wrote:
@Marvin Rhoads ... I am assuming you meant that the FQDN type would not work with wildcard only but would work with regular url; such as, www.cisco.com, correct?
Also, I am required to add a BYPASS acl to include about 450 urls that was provided to us by Microsoft. Is there any performance or utilization issues that might occur as a result of using this high number of urls?
#1 - correct.
#2 - on what platform?
... View more
Created by
Marvin Rhoads
in Optical Networking
Marvin Rhoads
in Optical Networking
02-21-2019
07:27 PM
02-21-2019
07:27 PM
Cisco has decided that they would rather have you buy their twinax-based transceiver products for 10 Gbps over copper.
Those are a lot less expensive but have the downside of potential compatibility issues if the other end of the link isn't another Cisco device. (Of course Cisco sees that as an upside.)
... View more
Created by
Marvin Rhoads
in Optical Networking
Marvin Rhoads
in Optical Networking
02-21-2019
07:07 PM
02-21-2019
07:07 PM
They don't offer anything in the SFP form factor according to their tool.
https://tmgmatrix.cisco.com/home
Filtering on 10 Gbps and copper cabling only shows the older (and end of sales) X2 form factor product (X2-10GB-T).
https://www.cisco.com/c/en/us/products/collateral/interfaces-modules/transceiver-modules/eos-eol-notice-c51-732419.html
... View more
Created by
Marvin Rhoads
in Policy and Access
Marvin Rhoads
in Policy and Access
02-21-2019
10:10 AM
02-21-2019
10:10 AM
I'd defer to the TAC - they have a much greater body of knowledge to draw from than I do.
... View more
Created by
Marvin Rhoads
in Advanced Threats
Marvin Rhoads
in Advanced Threats
02-21-2019
09:39 AM
02-21-2019
09:39 AM
A blocked connection to a CnC server should normally show up under Security Intelligence events. It should be relatively easy to filter down that table to show only the host that was reported in the Intrusion event.
If a given host has many different Blocked connections, it should be visited in person and remediated rather than try to ascertain everything remotely from FMC.
... View more
Created by
Marvin Rhoads
in Policy and Access
Marvin Rhoads
in Policy and Access
02-21-2019
05:21 AM
02-21-2019
05:21 AM
@fatalXerror those would be post-upgrade tasks:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/upgrade_guide/b_ise_upgrade_guide_24/b_ise_upgrade_guide_24_chapter_0100.html
... View more
02-21-2019
12:55 AM
What platform are you using?
If it's supported, I recommend you try " clock update-calendar " command in config mode.
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/bsm/configuration/15-2mt/bsm-time-calendar-set.html#GUID-C76DE715-EEAB-4DA8-B80C-85B3A5CDA714
... View more
Created by
Marvin Rhoads
in Firewalls
Marvin Rhoads
in Firewalls
02-20-2019
12:07 AM
02-20-2019
12:07 AM
This has been answered in several threads. For example:
https://community.cisco.com/t5/firewalls/order-of-operation-asa/td-p/2668695
... View more
02-20-2019
12:00 AM
With that license (per node) you can configure VPN load balancing.
Note that is is separate from configuring the ASAs as a high availability (HA) pair. If you only have 2 ASAs and they are configured as an HA pair then you cannot also do VPN load balancing.
https://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/vpn/asa-vpn-cli/vpn-params.html#pgfId-1079186
... View more
02-19-2019
11:48 PM
Are you asking about the ASA 5510 or ASA 5512-X. Both are end of sales but you can still purchase the Security Plus feature license for them.
The part numbers are L-ASA5510-SEC-PL= and L-ASA5512-SEC-PL= respectively.
... View more
02-19-2019
11:07 PM
Ah OK, that's more normal to see with singlemode.
From the output, you are in the "warning" and not "alarm" range so it is relatively safe to continue operating like that. If it were my network and that was an important link , I'd put a 5 dB optical attenuator inline.
If you're US-based.,m you can pick one up via Amazon for US$5.99.
https://www.amazon.com/Fiber-Attenuator-Singlemode-Simplex-Fixed/dp/B001B1HOOM
... View more
Created by
Marvin Rhoads
in Firewalls
Marvin Rhoads
in Firewalls
02-19-2019
02:06 AM
02-19-2019
02:06 AM
You're welcome.
I've done 3 pairs of them this year so far and they all went fine. Follow the module installation instructions carefully and you will be fine. Be sure to have your ASAs at one of the currently recommended code releases before beginning. 9.8(3) interim 21 is the current best choice.
https://software.cisco.com/download/home/284143129/type/280775065/release/9.8.3%20Interim
For the module software, overall 6.2.3.x is slightly recommended over 6.3.0 only because the latter hasn't had any patches released yet. That may change in the coming weeks.
You can always open a TAC case proactively if you have any doubt. (assuming your have Smartnet support)
... View more
yesterday
For non-blacklisted configuration commands that are not exposed via the
FMC GUI, you use a FlexConfi...
yesterday
ASA 5585-X with Firepower service module? With URL filtering license? If
so, the URL filtering to al...
yesterday
It's imaged with the very old version 5.4.1. So first reimage it to the
current 6.3.0. Procedure is ...
yesterday
For VPN pre-shared keys you need to have them in plain text. You can
retrieve them from the ASA if y...
yesterday
@InTheJuniverse , As @ngkin2010 correctly mentioned, you need the
Security Plus license for an ASA 5...
yesterday
@zekebashi wrote: @Marvin Rhoads ... I am assuming you meant that the
FQDN type would not work with ...
Thursday
Cisco has decided that they would rather have you buy their twinax-based
transceiver products for 10...
Thursday
They don't offer anything in the SFP form factor according to their
tool. https://tmgmatrix.cisco.co...
Created by
Marvin Rhoads
in Advanced Threats
Thursday
Thursday
A blocked connection to a CnC server should normally show up under
Security Intelligence events. It ...
Thursday
@InTheJuniverse 1. In the patch release notes you will see the
prerequisite for upgrade to the patch...
Thursday
FMC won't automatically pull the prerequisite 6.2.3.0 update via the
"Download Updates" button under...
Public Statistics
| Date Registered | 06-28-2001 03:55 PM |
| Date Last Visited | 02-22-2019 07:04 PM |
| Total Messages Posted | 15,353 |
| Total Helpful Votes Received | 13904 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 90 | |
| 10 | |
| 5 | |
| 35 | |
| 45 |
.jpg "VIP Advocate"){kind=icon}
Awards
Hall of Fame
Cisco Designated VIPs
2018 FirePOWER Firewalling VPN
Cisco Designated VIPs
2017 Firewalling Network Management VPN
Cisco Designated VIPs
2016 Firewalling Network Management VPN
Cisco Designated VIPs
2015 Security
Cisco Designated VIPs
2014 Network Management Security
Cisco Designated VIPs
2013 Network Management Security
Cisco Designated VIPs
2019 Firewalls, Firepower, Security
