About khalid_mahmood

khalid_mahmood · 08-20-2021

Hi does anyone know of any good documents or URLs that provide best practice guidance on FMC deployment and configuration? The only one I've found is the FMC Sizing Guide https://salesconnect.cisco.com/#/search/Firepower%2520NGFW%2520FMC%2520Sizing...

khalid_mahmood · 12-06-2017

Client Environment:-Cisco ISE v2.3Cisco AnyConnect v4.5 client (ISE Posture, NAM and AnyConnect modules)Windows 10 PC’s with Machine certs issued by an Internal Sub Certificate AuthorityAnyConnect NAM configured for EAP-TLS Authentication using Mach...

khalid_mahmood · 12-06-2017

We have a unique situation where we have a customer deployment where Windows machines are built with a machine certificate and stored in various locations ready for deployment. However the Issuing certificate Server expires soon, which means that the...

khalid_mahmood · 09-19-2017

Hi, looking for configuration example for ISE Posture using the new enhanced Posture discovery method available in ISE 2.2 and above.We recently upgraded from ISE 2.1 to 2.3 - we still have the old method of posture using redirection configured, but...

khalid_mahmood · 07-31-2017

Hi,We have a Cisco ASA5585 with AnyConnect SSL VPN configured, with Always On and Trusted Network Detection (*UKDOMAIN & defined certificate servers). The VPN client works fine, but when you connect a LAN cable in the VPN client should recognise it's...

khalid_mahmood · 06-10-2022

Mohammad, can you manually add multiple ISE deployment via PXGrid v2 or is that only possible using phython script? Thx Khalid

khalid_mahmood · 08-23-2021

Thank you Marvin will review

khalid_mahmood · 01-29-2021

Hi Oliver, very useful is their a newer version of this comparison chart for 2020/21? thanks

khalid_mahmood · 10-14-2019

Hi Marvin, would you know if the Eval version is limited to 100 max endpoints when profiling, given that we will not be using the profiling in the authorisation rules, which is technically when it consumes a plus license. Thanks Khalid

khalid_mahmood · 09-05-2018

Hi Harini, great content, thanks, but could not see any guides for licensing the Firepowers, can you advice. I'm looking at a 4110 with NGFW, IPS & AMP.....found the subscription in the datasheet but its for TMC only: L-FPR4110T-TMC= Cisco Fire...

Member Since	‎08-04-2003 01:10 AM
Date Last Visited	‎08-13-2026 02:10 AM
Posts	38
Total Helpful Votes Received	11

User Statistics

User Activity

Cisco Firepower Management Centre Best Practice Guide

AnyConnect Trusted Network Detection using Certificate Hash

Cisco ISE Allowing Expired Endpoint Certificates

ISE 2.2 or 2.3 Posture configuration

Cisco AnyConnect VPN Trusted Network detection does not work with ISE Posture on the LAN

Re: Can FMC integrate to more than one ISE deployment ?

Re: Cisco Firepower Management Centre Best Practice Guide

Re: FTD combines both asa and

Re: Cisco ISE for practice and testing.

Re: Quick Links to NGFW Resources