Default User Role in Firepower

When I took over the Firepower system at work, we had a long standing issue relating to a couple of users. Everyone in Security Operations is an admin in the FMC, however, one of our SecOps guy could not see all the events in the FMC. He can see everything in the SIEM, just not in the FMC, verifying...

Database Integrity Check Failed

A quick tip for Firepower when you have a database error.  This seems to come up a lot especially if you're manually importing snort rules from an outside source such as Emerging Threats. Every once in a while you'll get a database error that will cause an operation to fail. In my case, it's the scheduled backup. The web page doesn't give you a lot go to on at first glance, but under your schedule,...

Chicken Chicken

Chicken Chicken Chicken Chicken. https://isotropic.org/papers/chicken....

My New Favorite ISE Setting

And by favorite, of course I mean least favorite ever. This one has been a thorn in my side for a while now. In the User Password Policy (Administration > Identity Management > Settings > User Password Policy), under Password Lifetime, there's a setting called "Disable user account after ____...

802.1x in GNS3

After tiring of the trips up and down the stairs dealing with a physical 3750 switch and Windows 7 workstation testing 802.1x, I decided to give it a shot virtually. And I'm pleased to report that it works like a champ.  This post is not a how to guide on setting up 802.1x, it's to show another...

Troubleshooting With Near Zero Access

Early one morning last week I attempted to RDP into my lab to test something out I was looking into at work. Access to my terminal server was fine, but from there, I was unable to access any other system on my network. Every system that I attempted to RDP into came back stating that my user account was unauthorized for RDP access on that system. The user is a Domain Admin so there should be no reason...

Check for Updates

If you're a Windows 10 user, you might want to think twice about clicking on the Check for Updates button. http://disq.us/t/39kb...

New FAQ

1. What kind of Questions should I expect to see on the CCNA exam? All the information that is known about the exam is available on the Cisco Certifications pagerelating to the exam in question. The Cisco NDA forbids us from telling you anything more. This includes how many of each type of question we saw, whether or not a specific topic is covered heavily, and what specific questions we were asked. 2....

That'll Never Work!

While reading through a discussion on Slashdot today, someone linked a thread from 1999 as proof that the Slashdot community has always been pretty dumb collectively.  The thread was on the upcoming release of VMWare, a class of products that clearly hasn't been heard of on PCs at the time. The thread can be found here.  It's amazing how a concept so ingrained today appears to be so foreign...

Moving to IPv6 in the Lab

IPv6 is one of those technologies that I've been wanting to dig into further.  I know enough that I can get through the certification exam of the day with a little book time to refresh, but I don't know it well enough.  It's not something I've been avoiding, just something that I've kept putting...