Networking-Notes

  First check the FTD Memory > show memory  Free memory:        8373597176 bytes (81%) Used memory:        1992966480 bytes (19%) -------------     ------------------ Total memory:      10366563656 bytes (100%) Login as expert and check TOP. just to see what utilizing the memory > expert  FW01:~$ sudo su We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things:     #1) Respect the privacy of others.     #2) Think before you type.     #3) With great power comes great responsibility. Password:  > expert  FW01:~$ sudo su We trust you have received the usual lecture from the local System Administrator. It usually boils down to these three things:     #1) Respect the privacy of others.     #2) Think before you type.     #3) With great power comes great responsibi...

 Solarwinds Interface monitoring on Asymmetric lines Be aware that if you have asymmetric Download and Upload speed from your ISP and add the device on the solarwind you have to manually set the bandwidth of the interface as by default is "reading" the configured one. Even if you have configuration for bandwith and Bandwith receved.

 Useful Windows Commands Try First 1. Press “ Windows key ”, start typing “ command prompt ” on the start screen. 2. “ Command Prompt ” will appear in the list, now “ Right click ” on command prompt. 3. Click on “ Run as administrator ”, if you get a UAC prompt click on “ Yes ”. 4. Now type the command “ netsh winsock reset ”, press “ Enter ”. Check 802.1x logs of the supplicant On the client side, go to  Event Viewer (Local)\Applications and Services Logs\Microsoft\Windows\WLAN-AutoConfig/Operational  for wireless issues. For wired network access issues, go to  ..\Wired-AutoConfig/Operational .      https://learn.microsoft.com/en-us/troubleshoot/windows-client/networking/802-1x-authentication-issues-troubleshooting

  Control plane ACLs cisco FTD On cisco firewall traffic destined to the firewall cannot be blocked by ACP. Even if you do not bypass the ACLs. Talking about control plane traffic. Eg remote access vpn. Geolocation based is not supported. https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvs65322?rfs=iqvred   The solution with control plane ACL is well documented in the below link. https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/221457-configure-control-plane-access-control-p.html#toc-hId-689510534

ISE Logging are missing when change the Secondary as Primary monitoring ISE01 -- PRI(A), SEC(M) ISE02 -- SEC(A), PRI(M) To resolve this go to Administraton - System - Logging - Log Settings and disable ISE Messaging Settings.

Reset the session database on cisco ISE - No way to reset the session from GUI ISE02/admin# application configure ise Selection configuration option [1]Reset M&T Session Database    <- This will clear all the sessions.  [4]Reset M&T Database            <- This will delete the logs also. Run this if [1] is not working. 1 You are about to reset the M&T session database. Following this operation, an application restart will be required. Are you sure you want to proceed? y/n [n]: y

  Bypass users from a splash page  Configure a new Group Policy (Network-Wide > Group Policies).  Splash page bypass can be configured by selecting "Bypass" in "Splash" dropdown, see the picture below: Leaving anything else as "use SSID default" will ensure that all the other global configuration is left untouched. Once a group policy is assigned, navigate to  Network-wide > Clients > click on the clients name > look for Group Policy > change from Normal to the group policy you created.