About JH8286

JH8286 · 12-04-2023

I am trying to create a policy that blocks all SSL traffic to/from a particular host. I am using https curl to the host from a test client to prove this. I have tried adding an SSL policy which has the host and test client (both are in src/dst) with ...

JH8286 · 07-04-2023

Hi - can anyone tell me if/how the local admin password on FTD devices is encrypted?Is there any way to validate this (either way) via the CLI or FMC?Many thanks

JH8286 · 05-18-2023

Hello all,I have a 2 node (PPAN/SPAN) ISE deployment, used for TACACS+ I am moving to SMART licensing, at the moment I use the smallest perpetual Base license size available (100) and 1 device admin license on each node, the Base which is installed o...

JH8286 · 05-10-2023

I am looking at uplifting a small (2 node) ISE deployment from 2.6.0 > 3.2.0 (via 2.7.0 as required)Currently the 2.6.0 deployment is running classic licenses - base, VM, and device admin.I understand 3.2.0 requires smart licenses, however the enviro...

JH8286 · 12-04-2023

Hmm OK, I don't want it to decrypt any traffic, I just want it to block ALL SSL of any kind, from a specific host - can the FTD not detect encrypted tfc. or the SSL handshake CLIENT HELLO etc. without actually decrypting?

JH8286 · 07-06-2023

Thanks - but how can this be demonstrated via command line or configuration setting? Is there cisco documentation I cant find?

JH8286 · 07-04-2023

On IOS devices you can see the password encryption type e.g. 5, 7, 9 etc.How is the password encrypted on a FTD device and how can this be demonstrated/viewed?Thanks

JH8286 · 05-18-2023

Nevermind - I have found it - thanks for your help! :In 2.x : Device AdministrationPerpetualTACACS+A Base or Mobility license is required to install the Device Administration license.The number of Device Administration licenses must be equal to the n...

JH8286 · 05-18-2023

That would be good - It's definitely 100% TAC+ - I think the confusion is with 2.x we were sold the smallest base (100 endpoint) as it was a pre-req for using Device Admin. Sorry to be a pain but can you link any Cisco material that I can reference w...

Member Since	‎07-23-2019 03:43 AM
Date Last Visited	‎12-28-2023 08:00 AM
Posts	10
Total Helpful Votes Received	4

User Statistics

User Activity

Cisco FTD - Block all SSL traffic from a specific host

FTD Admin Password Encryption

Cisco ISE Device Administration License

Cisco ISE 2.6.0 > 3.2.0 Upgrade

Re: Cisco FTD - Block all SSL traffic from a specific host

Re: FTD Admin Password Encryption

Re: FTD Admin Password Encryption

Re: Cisco ISE Device Administration License

Re: Cisco ISE Device Administration License