Recently due to several issues I had with Sourcefire 6.0 code, I went through downgrade exercise taking it back down to version 5.4. With Sourcefire, there is no simple way to roll back from one version to another. Configuration backup helps with Defense Center however Sensors can not be rolled back to the previous …
Tag: Troubleshooting
Cisco ISE has huge reporting section but only a few of the reports are useful to me. So the need came up for a flexible searching and reporting tool. Splunk seemed to be a great candidate especially since it has all the plugins available and Cisco Security Suite App adds …
Recently I’ve discovered that Apple i-Devices (iPhone’s and iPad’s particularly) will not work well when provisioned for EAP-TLS with Single broadcasted SSID. In my case device would successfully complete provisioning for certificate based authentication but re-authenticate again as PEAP. One of the workarounds was to forget SSID after provisioning and …
In this post, I’ll write about my experience with Sourcefire 6.0 upgrade. Upgrade file became available on 11/11/2015 and at the time of writing it’s been out for a few month which is “theoretically” enough time to consider a cautious transition from 5.4.x into 6.0 environment. Components: Cisco Sourcefire Defense …
Sometimes Ironport Email Security Appliance (ESA) will generate an application fault alert with minimal or totally useless information for us. Most of the time this alert can only be explained by TAC engineer. One of this app faults may look similar to the following: An application fault occurred: (‘egg/quarantine_smtp.py send_xmetadata|592’, “<type …