About atsukane

atsukane · 04-16-2025

Hi team,Question around how to verify whether SI is actually dropping intended traffic.My understanding is that SI is processed BEFORE ACP is evaluated.When I run packet tracer against an IP that's included in one of the lists/feeds in /var/sf/iprep_...

atsukane · 04-02-2025

Hi All, We are running Agent-to-Agent tests between offices and DC, and seeing loss on the pass visualisation where next hop is firewall. Firewall is FMC managed Cisco FTD running 7.4.2.1-30.I'm allowing tcp49153 that is required for agent-to-agent...

atsukane · 03-19-2025

Hi All,We've installed SSD on Catalyst switches so that we can run synthetic test from the TE agent.What are the required steps to install BrowserBot on TE agents that are already running on Cat switches?CoPilot tells me the following steps, but can'...

atsukane · 02-26-2025

We run BGPs on FTDs managed on FMC, FMC is running 7.4.2.1-30 and FTD2140 is currently 7.2.7 but due to be upgraded to 7.4.2.1-30 in a few week's time. I wanted to monitor BGP status on Solarwinds NPM, but unlike ISR4k the option isnt' available on F...

atsukane · 02-22-2025

Hi all,Just installed patch 7 on our ISE 3.2 two nodes deployment. I've initiated the install from GUI, expecting that patch install will take some time, stepped away for a bit (10-15minutes or so) to help my son move his furnitures, then came back t...

atsukane · 04-17-2025

Thanks @Marvin Rhoads It says "gid:136, sid:4, rev:2, action:reject, msg:"(reputation) packets blocked based on destination""The "reputation" part makes sense as the IP i used is in one found under /var/sf/iprep_download.Also thanks for the Cisco Li...

atsukane · 04-17-2025

Thanks @nspasov We are running 7.4.2.1. The IPs I've used in these examples are found in "Cisco intelligence feed: Malware"

atsukane · 04-16-2025

Hi @nspasov Thanks for the response. No, we do not have ACP rules based on URLs for that IP. As a test, I've picked another IP from the Cisco SI feeds and ran packet tracer and got the same results. I can't see SI phase in the packt tracer anyhow, s...

atsukane · 04-16-2025

Thank you @Tyler Langston .We have 5 days worth of PS time from Cisco, so we can work with them to resolve the issue. Just wondered if there are people in this community faced similar issue Thanks again.

atsukane · 04-09-2025

HI @Nikhil5 I know this is an old post, but did you manage to enable BGP monitoring on FTDs?thanks,

Member Since	‎05-03-2016 04:05 AM
Date Last Visited	‎04-16-2025 04:54 AM
Posts	201
Total Helpful Votes Received	88

User Statistics

User Activity

Verify FMC/FTD SI rule is working

Agent-to-Agent test behind firewall

Install BrowserBot on a ThousandEyes agent on a Cisco Catalyst switch

FTD - Missing BGP routing neighbours OIDs

ISE did not seem to have reloaded after patch install

Re: Verify FMC/FTD SI rule is working

Re: Verify FMC/FTD SI rule is working

Re: Verify FMC/FTD SI rule is working

Re: Agent-to-Agent test behind firewall

Re: BGP SNMP Trap on Cisco FTD