About buffkata

buffkata · 08-30-2022

Hi, I noticed something strange and wanted to share with the community and see if this someone has some info about this behavior. We have a daily Snort Rule Update set on the FMC ( probably not the best option - now I am thinking that weekly would be...

buffkata · 11-15-2021

Hi, I just noticed something on our ASAs and was wondering if someone have seen this or if there is a better ezplanation for the difference between traffic(packets and bytes/s ) reported by an ASA on its Physical Interfaces number and nameif. Belo...

buffkata · 10-21-2021

Hi,Recently we added zScaler IPs to our existing Local LAN Access ACL. The idea was that since this ACL is a split tunnel exclude it will exclude the zScaler IPs as well. This way RAVPN users will have their HTTP/s traffic protected by the cloud prox...

buffkata · 01-04-2021

Is this common(known) issue? When I configure one or two captures on the FTD(CLI or GUI) the device CPU increases by additional 20% even when the capture is full and Stopped/Paused.I really did not saw any difference if I change the captures buffer s...

buffkata · 03-11-2020

Hi,I have a few users where their Anyconnect randomly reconnects - I have troubleshooted and believe it is related to the DPD but it do not make any sense to happen on just a few users. We have reinstalled their Anyconnect Client. Below is the part o...

buffkata · 04-26-2024

Do not update the FTDs to 7.3 but skip to 7.4.1 directly (or use 7.2.6).Anyconnect is end of live ( no new updates will be released) but it still will be supported for 3 more years :"Application software support will not be available for the stated s...

buffkata · 08-31-2023

You are correct - that is a Zone and not an interface. You will need to create a new zone. If you manage more then a few FTDs you can place their OUTSIDE Interfaces all in the OUTSIDE Zone ...but your new interface here serves a different purpose.It...

buffkata · 08-18-2023

Python script form any network PC can do this.

buffkata · 07-27-2023

Marvin, Is there are newer guide - for FMC version 7.2.4 and later. Seams that the guide you post is for much older version and not able to find the settings ?

buffkata · 07-07-2023

No - Just the MAC of the ASA. That is why we cannot add any IP reservations in the DHCP server.

Member Since	‎10-02-2019 08:23 AM
Date Last Visited	‎05-06-2024 04:57 PM
Posts	48
Total Helpful Votes Received	24

User Statistics

User Activity

Snort Auto Updates on FMC

Interface traffic on ASA

Anyconnect Local Lan Access + split tunnel exclude

FTD high CPU when traffic captures are set

Anyconnect randomly reconnects

Re: Where is the FTD/Anyconnect/Cisco secure client Compatibility matr

Re: Interface/Security Zone mapping and NAT question

Re: Firepower 7.0.5: Firewall reboot possible via cron job?

Re: Query for Cisco FTD Brute Force Attack

Re: DHCP Relay AnyConnect VPN Clients