Cisco ESA Secure Email Upgrade from 13.5 to 14.2 Release

Cisco Fire Jumper

Performing Upgrade Cisco IronPort Email Security Appliance(tm) Upgrade Note: From Async OS 14.2 version onwards, the Sender Domain Reputation verdict names have changed. For example, the ‘Tainted’ and ‘Weak’ verdict names are merged as one verdict known as ‘Neutral’. During the upgrade, the system automatically updates the Sender Domain Reputation message and content filter configurations … Read more

Cisco Firepower Forbidden- you don’t have permission to access

Fire Jumper Academy Systems Engineer

After re-image FPR2110 from FTD to ASA9.8.2, the chassis (FXOS) mgmt interface UI become unaccesible giving the following error “Forbidden- you don’t have permission to access / on this server”. In a nutshell, i could access FXOS via SSH and ASA (SSH & HTTPS) but the FXOS Chassis Management was broken. After spend some time, … Read more

AnyConnect Package on the secure gateway could not be located

This error message is because your Cisco ASA doesn’t have the AnyConnect image for your WebVPN profile. These images can be downloaded from cisco.com .This example is for ASDM 7.6, but if you run version 6.x you can do using ASDM Configuration > Remote Access VPN > Network (Client) Access > AnyConnect Customization/Localization > Binary … Read more

Redundant interfaces not supported on FXOS platforms

Cisco Firepower

The documentation might get you a bit confused, but after have a chat with Cisco TAC they shed some light…..Unfortunately this design is not supported, so if you are migrating from a Old Cisco ASA platform it’s time to redesign and avoid redundant interfaces. So i had to move those interfaces to port-channel, so the … Read more

Tweak multicast on Cisco ASA without RP

Fire Jumper Academy Systems Engineer

This came as a customer request, where they required to send multicast for testing purposes to their own customers but without using a RP. A Cisco ASA is segregating the environment acting as Layer 3 between the multicast sender and receivers. The first step was disabling the snooping on the switching to let the traffic … Read more

Realistic Traffic Generator

Fire Jumper Academy Systems Engineer

TRex is an open source, stateful traffic generator fuelled by DPDK. It generates L4-7 traffic based on pre-processing and smart replay of real traffic templates. TRex amplifies both client and server side traffic. Trex can can scale to 200Gb/sec with one UCS, but you can run it in any x86 hardware. You can build your … Read more

SFP validation failed on Nexus

Fire Jumper Academy Systems Engineer

If you come across to an issue like this you are about to fix before that you think. After plug in SFP (1 gig copper) on a SFP+ port i got an error saying “SFP validation failed”. N3K# sh int e1/45 Ethernet1/45 is down (SFP validation failed) Dedicated Interface Hardware: 100/1000/10000/40000 Ethernet, address: 00d7.8fa9.34b4 (bia … Read more

Be a Cisco Champion 2024

Cisco Champion program is looking for the best and the brightest tech enthusiasts who are also active members of the community. If this sounds like you, then submit your application for the 2024 Cisco Champion Program. Cisco Champions are an elite group of technical experts who are passionate about IT and enjoy sharing their knowledge, expertise, … Read more

Cisco SecureX Series on Youtube

I’ve started a series on youtube called Cisco SecureX Series, this is purely a walkthrough of all different possible integrations and do some real live Orchestration demos. Death to PowerPoint slides! Intro to SecureX Series What is Cisco SecureX Cisco SecureX Quick Tour Dashboard Cisco Umbrella Integration Cisco Meraki Integration Cisco Advanced Malware Protection Integration … Read more