Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi guysI want to test ISE Posture with AnyConnet on ASA, but the Client Provision cannot work correctly. However, when ISE Posture with BYOD is work corretly. Here some configuration on ASA and ISE captures.ON ASA:
webvpn
enable outside
anyconnect ...
When i learning Firepower Intrusion Policy, i create a IPS Rule like the picture, i want to block traffic from test-pc to http server when the uri contain "configure" keyword, but it not work properly. i didn't see the intrusion events.
I have some questions about AMP Rules about Malware Cloud Lookup with Firepower Management Center(FMC).
Some documents says that with these rules, the FMC will sends the SHA256 hash of a file to the cloud for analysis. How the SHA256 hash is calculat...
There is a problem when i import Cisco_Firepower_Threat_Defense_Virtual-6.1.0-330 into VMware Workstation. while import to esxi is no problem.VMware Workstation is version 12.5. My CPU is Intel I7-6700HQ and memory is 32G.
Thanks, no nat has configured, and DNS working correctly. i have test with ise 2.1,2.2,2.4, same issue encoutered.
additionally,I have test another way that configure posture, on ASA added the following command,
ON ASA
group-policy Group_SSL attribut...
i change the discovery host to 172.16.1.241, and enable ip http server on R1, same issue.
However, when i change the remedia timer to 20min. But on VPN Client also use 4min. what's that problem?
if i manually install anyconnect module posture and iseposture manully and add the xml profile with discovery host 172.16.1.110, it can work. PC can dynamic download anyconnect compliance module, but is not a intelligence way.
and why need to change ...
I configure two intrusion rule:intrusion rule "http certsrv" and intrusion rule "http configure". Like the picture, but when i test it, the "http certsrv" is work properly, but the "http configure" didn't. use windows server 2008 as web server for te...
