Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Looking to see if there is a method for getting a event/incident emailed that contains the message content the same as when you view an incident. Currently have been able to get syslog, email and xmail sent but the message only contains either a link...
When trying to tune for a False Positive I can't do this as the MARS continues to ask for a valid ip address.The event is coming from a firewall and the event is known so I just want to stop this from appearing in the Incidents.
The customer comes to "https://xx.xxx.xx/apc_prd/WsExternalApc.asmx?WSDL "But need to redirect this to "https://xx.xxx.xx/apc_prd/WsExternalApc.wsdl"Issue is the CSS does not like the ?WSDLTried the following without success: content APC_PRD_WDSL_80...
I want to change up the current config of my 4215 to use two ports for a IPS inline pair pass thru setup. If you have come across the documentation on this I would appreciate if could you link the relevant documentation to your reply. I currently hav...
So you do all this work yet is there a simple method of backing up your configuraiton so you could restore the device should it fail. I my case the events could be lost but I would like to at least have all my groups and settings available if need to...
Thanks it does in fact as the dcoumnetation does indicate.But to be blunt this a useless option if you do not know how to do that. Once again in my opinion Cisco strikes out on simple options.
Sure but when I use the method of clikcing the False Positive tuning from the incident I am taken through the steps. The normal flow let's you select any to any ip to any etc. But with a 0.0.0.0 as the IP address in this process you can't use the int...
I am not concerned about the message from the firewall it's self. I am interested in the handling of the 0.0.0.0 in the Mars and why this ip is being reported in the MARS.
So where is the edit button for the orginal message?I have the "no names" command in the firewallAnyhow not sure how copy/save/export of the raw data but the message is PIX Stateful failover unable to create a translation slot (xlate)Source IP/Port 0...
The issue so far is the line url "/apc_prd/WsExternalApc.asmx?WSDL"CSS complains "%% Unsupported or invalid content rule URI"CSS11503(config-owner-content[TEST-APCD_WDSL_80])# url "/apc_prd/WsExternalApc.asmx?WSDL"%% Unsupported or invalid content ru...
