I have an on-prem FMC that manages a handful of FTD devices. All of these devices use private IPs and are not NATed or exposed to the Internet in any way. The problem is some of the FTD devices are reachable only via IPSec VPN which sometimes gives...
What is SGT in Cisco-ISE ?
Hello, after deploying a couple of firepower of 4100 family, we configured the FXOS in cluster, apparently there is not differentiation on between cluster and HA (unless I missed something). So far so good, the problems comes when from FMC I want to ...
We have migrated from a AS 5516 to a NGFW 1140. Everything seems to be working great so far. What I was wondering is we have site-to-site tunnels configured and it appears the normal internet traffic is also trying to go through the tunnel. How can w...
Hello AllI am working on a LAB/Pilot to Create a Ipsec tunnel to vendor over bgp using the Tunnel1 connection. I have create the tunnel and have the IPsec up and working. Examples are connection to Cloud connection but I want to hid my internal IP ...
Hello,Where can I find out how specifically the Cisco Secure Firewall/ Firepower engine detects specific applications in network traffic.I understand they are applications which are detected in different ways, one way for example ASCII patterns in th...
Hello,I have been stuck for several days on an ISE authentication problem with SAML.Microsoft authentication works fine then the ISE redirects to google.com and it fails to change the authorization profile. As he does not have Internet access with th...
Hi all,I would like to ask how could I classify hosts automatically on StealthWatch 7.4.2 with domain datastore datastore.I tried the application hosts classifier, but the problem its not suitable for datastore. So, It did nothing.Do you have any sug...
i have 4 ASAv(ASA1v ASA11v ASA2v ASA22v). When I downloaded and installed ASDM from ASA1v, ASDM did not run automatically and there was no icon on desktop & window menu, but was able to uninstall in Control Panel. When I downloaded and installed ASDM...
Does anyone know where to find Cisco Secure Workload (Tetration) Training?? Is this product being abandoned?
Hi GuysI am completely new to Cisco Firepower and ISE. I am trying to assist a client with moving from DUO MFA to Azure MFA on Cisco VPN. The customer uses both Cisco Firepower and ISE in the environment.The question are:1) Can users be moved to Azur...
Hi All,We are migrating from ASA to FTD and planning to use migration tool, I came through that in 7.2 version of FMC and FTD even VPN(both site to site and AnyConnect VPN) configs will be auto-converted too. I am mostly concerned from ssl certifica...
Hi All,I have set up SSL decryption for most traffic with a few exceptions and it is working well, however when trying to sign in from Azure CLI i am getting the following error:HTTPSConnectionPool(host='login.microsoftonline.com', port=443): Max ret...
Hallo,I have a few C1100 routers that seem to have some UDP ports open. Unless I disable the protocols e.g. NTP, the port are as below after an nmap scan:123/udp open ntp161/udp open snmp500/udp open isakmpOur SP says that there is currecntly no r...
[Updated] Hello everyone, Case 1: I'm curious about the capabilities of a firewall that operates without a license. Additionally, do these capabilities vary between different firewall series when no license is present? --------- At CCW I've added thi...
