Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Scott_22
Online
Scott_22
Member since
07-26-2018
Beginner
Created by
Scott_22
in Policy and Access
in Policy and Access
04-16-2019
05:55 PM
04-16-2019
05:55 PM
Just ran into this issue on a 2.1.x install. I can attest that you MUST use the URL mentioned here: copy ftp://example(username):example(username)@10.1.1.20/ise-upgradebundle-2.0.x-2.3.x-to-2.4.0.357.SPA.x86_64.tar.gz disk:/
... View more
04-15-2019
08:28 AM
What is the best way to move malware policies tied to our existing 5525 to a Firepower 2120? In the FMC, do I apply the rules to the ACP used by the new FTD appliance?
... View more
Labels:
04-05-2019
01:40 PM
When you created your variables, did you have to add one for the inside interface?
... View more
04-01-2019
11:17 AM
Before I remove an expired cert on the ASA, how can I confirm that it's no longer in use?
... View more
Labels:
03-27-2019
08:31 AM
Does anyone have experience with configuring WCCP on an FTD box? It appears that the configuration is performed through FlexConfig. We have a Forcepoint content filter that we previously had integrated with our ASA, but we are looking to move to FTD and this is a show stopper. Any information is more than appreciated!
... View more
Labels:
03-27-2019
07:33 AM
The websites you're trying to block utilize HTTPS, so the class map matching HTTP will not suffice.
... View more
03-21-2019
12:38 PM
Okay so to confirm, a firepower box running ASA code cannot be configured with IPS and Malware services, and also cannot be added to an FMC?
... View more
03-20-2019
07:50 AM
I'm looking for documentation on configuring the IPS features on a firepower 2120 running ASA code. Any help would be greatly appreciated!
... View more
Labels:
03-14-2019
07:26 AM
Thanks for your Marvin! I will give this a shot and let you know if it works.
... View more
03-09-2019
08:44 AM
I attempted that by using the manual NAT entry, but continued having the same issue. See the error below after adding the object group.
... View more
03-08-2019
05:17 PM
There's a good chance I'm doing this wrong, but when I try to forward more than one port on my FTD box, it gives me the following error:
Here's the current rule in CLI:
nat (LAN-Side,ISP-Side) static interface service tcp ssh ssh
Any idea why it won't let me add another PAT entry?
... View more
Labels:
02-13-2019
06:43 PM
Confirm that your ACL statements match on both sides.
EX.
local
permit ip host 172.31.63.49 192.168.30.0 0.0.0.255 permit ip host 172.31.63.33 192.168.30.0 0.0.0.255
remote
permit ip 192.168.30.0 0.0.0.255 host 172.31.63.49 permit ip 192.168.30.0 0.0.0.255 host 172.31.63.33
... View more
10-23-2018
05:30 AM
I'm studying for my CCNP and was wondering how exactly to configure OSPF for redundant connections in the model below. If I configure the distribution routers as totally stubby, how do I prefer one router over the other, or can they both be used at the same time? If they can be used to load-balance traffic, would I use a FHRP to allow the access layer to see only a single gateway?
... View more
Labels:
08-13-2018
01:00 PM
I noticed you mentioned the use of MED and communities, why is there a need for both? Also, for our sites that don't have an MPLS connection that use site-to-site tunnels, will they have to have two tunnels now - one for the primary DC and backup DC?
... View more
08-09-2018
07:03 PM
This is beginning to come together. So to determine to best path locally on the remote routers we set the weight, with the highest value being preferred, but what about inbound? Would we use either MED or AS_Path? Then when it comes to deciding how traffic is routed in the data center, we will use iBGP and set a local preference to prefer traffic to leave through the primary DC, and then MED,AS_PATH to also prefer it for inbound traffic?
... View more
Created by
Scott_22
in Policy and Access
04-16-2019 05:55 PM
04-16-2019 05:55 PM
Just ran into this issue on a 2.1.x install. I can attest that you MUST
use the URL mentioned here: ...
04-15-2019 08:28 AM
What is the best way to move malware policies tied to our existing 5525
to a Firepower 2120? In the ...
04-05-2019 01:40 PM
When you created your variables, did you have to add one for the inside
interface?
04-05-2019 10:39 AM
Does anyone have experience configuring WCCP through FlexConfig on an
FTD? What are the nuances and ...
04-01-2019 11:17 AM
Before I remove an expired cert on the ASA, how can I confirm that it's
no longer in use?
Created by
Scott_22
in Identity Services Engine (ISE)
03-27-2019 08:48 AM
03-27-2019 08:48 AM
What is the process generate a CSR in ISE? I'm assuming that one creates
the CSR, has it signed by a...
03-27-2019 08:31 AM
Does anyone have experience with configuring WCCP on an FTD box? It
appears that the configuration i...
03-27-2019 07:33 AM
The websites you're trying to block utilize HTTPS, so the class map
matching HTTP will not suffice.
03-21-2019 12:38 PM
Okay so to confirm, a firepower box running ASA code cannot be
configured with IPS and Malware servi...
03-20-2019 07:50 AM
I'm looking for documentation on configuring the IPS features on a
firepower 2120 running ASA code. ...
03-14-2019 07:24 AM
Hey everyone! I'm learning the basics of VXLAN and I'm trying to grasp
exactly what's going on in th...
Public Statistics
| Date Registered | 07-26-2018 05:34 PM |
| Date Last Visited | 05-17-2019 01:48 PM |
| Total Messages Posted | 30 |
