About AlexPi

AlexPi · 04-29-2021

Hello All, We have an issue with ISE and we need to understand if we can export the policies he have on our ISE via CLI so we can then proceed in importing them to a new ISE server.Also to the same effect is there the possibility to export the config...

AlexPi · 03-10-2021

Hello All, For the past year or so we have started using solely FTD devices, managed via FMC, for some of our main sites. In one of those sites we want to accommodate site-to-site VPN failover via the the pair of FTDs on site (2140). Unfortunately th...

AlexPi · 08-13-2020

Hello All, I have scenario that is totally new to me. I have a site with two FTD 2140 configured as and High Availability pair (Active, Standby), over FMC.The Primary/Active firewall connected to ISP-A and the Secondary/Standby firewall is connected ...

AlexPi · 08-06-2020

Hello All, We have configured a while ago an FTD 2140 via FMC and it has been running with no issues whatsoever. Now we have acquired a second FTD 2140, imported it to our FMC and we want to add as a failover to the existing one. Will that disrupt th...

AlexPi · 05-27-2020

Hello All, We have a remote office where we run a standalone FTD 2140 appliance. Now there is the need to add that appliance to an existing FMC. The 2140 appliance has locally configured routing (inside & outside interfaces), several site-to-site VP...

AlexPi · 04-29-2021

Thanks for that marce.I still do not see any reference to exporting ISE policies via CLI, are you aware if this is feasible?Best regards, Alex P.

AlexPi · 03-10-2021

Hello Rob,I have completely missed this! I will have a look further and test. Thanks for pointing it out.

AlexPi · 03-10-2021

Hello Rob, Thanks for your reply. The pair of FTD on the site is our main firewall and our VPN appliance. We have two ISPs on the site configured to failover, but currently we use site-to-site VPN only on one. We want to be able to do so for both ISP...

AlexPi · 10-10-2020

Great! Thanks Rob. I will them put ISP 2 on a different interface than ISP1 and then go fro there with Cisco's config guide.Thanks so much for the help!I will update once I have this up, or any other issues...

AlexPi · 10-10-2020

Hello Rob, It has been a while since my original post and your reply but now we managed to get another ISP!Ii was connected to the same port as the original, i.e. Primary (live) ISP is on Ethernet1/1 of Firewall A (Active) and the Secondary (new) ISP...

Member Since	‎02-19-2018 08:26 AM
Date Last Visited	‎05-05-2021 12:47 AM
Posts	67
Total Helpful Votes Received	105

User Statistics

User Activity

Can I export Authentication and Authorization Policy and server config via CLI in ISE?

Would you put FTD and FMC 6.7 in a busy production environment???

FTD High Availability pair with two ISP connections - one at each firewall

Adding failover FTD to an existing production FTD (via FMC)?

Adding configured standalone FTD 2140 to FMC?

Re: Can I export Authentication and Authorization Policy and server config via CLI in ISE?

Re: Would you put FTD and FMC 6.7 in a busy production environment???

Re: Would you put FTD and FMC 6.7 in a busy production environment???

Re: FTD High Availability pair with two ISP connections - one at each firewall

Re: FTD High Availability pair with two ISP connections - one at each firewall