Cisco FireSight Management
Hi,
When propose ASA with FirePower Services its mandatory quote Cisco FireSight Management, right?
What are the differences between products below:
FS-VMW-SW-K9
FS-VMW-2-SW-K9
FS-VMW-10-SW-K9
Only the devices that can managed?
Best Regards,
Pedro Martins
Yes, The only difference is in managing the number of appliances
FS-VMW-SW-K9 25
FS-VMW-2-SW-K9 2
FS-VMW-10-SW-K9 10
Similar Messages
-
Cisco FireSIGHT Management Center
Dear All,
I would like to ask that, is it mandatory to have Cisco FireSIGHT management Center OR Sourcefire Defence Center to configure and manage Cisco FirePOWER/ Sourcefire IPS appliances ?
Thanks & RegardsAdding to what adhogan mentioned - yes - except for the new ASA 5506 which, when used with ASDM 7.4, will allow ASDM-based setup.
Most use cases would still want to have an FMC though for always-on monitoring and archiving the data for retrospective analysis.
You do have the option of the small licenses that allow you to manage either 2 or 10 ASA module-based sensors. (FS-VMW-2-SW-K9 or FS-VMW-10-SW-K9)
For legacy Sourcefire 3D sensors (VMs or appliances) you need the full FMC/DC option. -
Cisco FireSIGHT Management Center,(VMWare) for 2 devices
Has anyone had luck register the PAK for Cisco FireSIGHT Management Center,(VMWare) for 2 devices (FS-VMW-2-SW-K9)? The process apparently involves logging into 'Defense Center' (part of the product I'm trying to download and install) to grab a license key. Chicken and Egg situation to be sure.
TAC hasn't been any help to date, saying that I need to provide them with a license key. Anyone?
Thank youSo here's the answer. With the purchase of FS-VMW-2-SW-K9 you also have to buy a SmartNet contract. Once you successfully have that info, you associate the contract to your profile and are then entitled to download the virtual appliance software. Once you have deployed the OVF file, you then get access to the 'licence key' or in this case MAC address that allows you to go ahead and fulfill the PAK to get the relevant licenses. Lots of hoops but I did it.
-
FireSIGHT Management Virtual Machine download
Recently purchased an ASA 5512-x with FirePOWER services. I am having trouble downloading the FireSIGHT management virtual machine because it says that I need additional licensing requirements to do so. I have tried registering the Control License PAK that I received, but it asks for the License Key for the FireSIGHT Source Defense console, which I cannot download because I don't have licensing rights to that. Feel like I am in a catch-22 situation. Any suggestions? Already filed a ticket with Cisco support who keeps insisting that I give them the Model_No + MAC_ID from the source defense console. Thanks in advance for any suggestions.
Marvin,
First, thank you so much for taking the time to try to help us resolve our issues. We are still waiting on a response from TAC.
You said:
"It sounds like your cisco.com userid is not associated with the Smartnet service contract that includes the Firesight Management Center. "
Yes! We think you are correct about this and we are moving to resolve. Reseller has stated it IS resolved but alas, we don't think so... but we are not exactly sure where to look on the "new and improved" Cisco Licensing Portal.
You said we should have these license PAKs
FS-VMW-2-SW-K9 Cisco FireSIGHT Management Center (VMWare) for 2 devices
CON-SAU-VMWSW2 SW APP SUPP + UPGR Cisco FireSIGHT Mana
Our invoice from reseller reads:
FS-VMW-2-SW-K9 Cisco FireSIGHT Management Center,(VMWare) for 2 devices
CON-SAU-VMWSW2 3 YR SW APP SUPP + UPGR Cisco FireSIGHT Mana
L-ASA5525-TAMC-3PR Cisco ASA5525 FirePOWER IPS, AMP and URL 3 YR Subs Promotion
We have recieved 2 PAKs:
FS-VMW-2-SW-K9 Cisco FireSIGHT Management Center,(VMWare) for 2 devices 1
L-ASA5525-TAMC-PR= Cisco ASA5525 FirePOWER IPS, AMP and URL Licenses Promotion 1
In addition, we have purchased the following options:
CON-SNT-A25FPK9 3 YR SMARTNET 8x5xNBD ASA5525x with Firepower Services, 8G
ASA5525-FPWR-K9 ASA5525-X with FirePOWER Services, 8GE, AC, 3DES/AES, SSD
ASA-AC-E-5525 AnyConnect Essentials VPN License - ASA 5525-x (750 Users)
ASA-AC-M-5525 AnyConnect Mobile - ASA 5525-x
So....., as far as we can tell, this is all correct and we should have everything we need. But the reseller, whom we are trying out for the first time, has not exactly been responsive to our inquiries about this and is not winning any points from my manager.
When we attempt to enter either of our 2 PAKs, we are still directed to enter a License Key from SourceFire Defense Center which we cannot download because "Additional Enntitlement is Required".
I feel like I'm stuck in theat old Abott and Costello skit "Who's On First?" ;) -
I'm interesting on buying a Firefox Smart Phone, but
I would like to know if are any app to install on Firefox OS smart phone in order to work with cisco call manager 10.5.
Something like Cisco Jabber for Android o iOS.
Thanks,Hi Itech,
If Cisco Jabber has a webapp, or mobile version of their website available, you should technically be able to access it through Firefox OS.
You may also search Firefox Marketplace for an alternative solution:
* [https://marketplace.firefox.com/]
- Ralph -
Unable to open 2 9509 switches at the same time in Cisco Device Manager
Dear Friends,
There are a pair of MDS 9509 switches whose management addresses are 172.16.2.197 and 172.16.2.198.
When we try to manage these Devices through Cisco device manager, the first device opens up without any problem, but when the second 9509 is opened in Cisco Device Manager, it fails giving the following error message:
"Open udp transport failed: Address already in use: Cannot bind"
To get around this issue, if we close the first interface to the 9509 switch, then we are able to open up the second 9509 in Device Manager.
We have this problem only in Cisco device manager. If we open one switch in Cisco device manager and the other switch in Cisco Fabric Manager, it works.
Also, we can telnet to both the devices successfully at a time.
The device manager in use is 4.1.
Please find enclosed the sh version outputs for your kind reference.
Can you please help me understand the cause of this issue?
Thanks a lot
GautamIs it always the same MDS that fails to open, or can you open either one first, and then the second one poses the problem (no matter which one is second)?
Can you try from a second work station and see if you can open DM to both switched at the same time? I suspect the address it is complaining about is the local workstation IP, not the MDS IP.
If you open the FM map, then you click on the MDS ICONs, can you open DM to both MDS?
- Mike -
Monitoring Cisco UCS Manager via HP System Information Manager 7.1 (SIM)
I am working with a customer to configure HP System Information Manager 7.1 (SIM) to monitor their Cisco UCS Manager.
The customer is looking to monitor the following:
- CPU Utilization on manager, blades, servers, etc...
- Memory utilization
- Network utilization
- System inventory
Alerting is needed for the following:
- Hardware failures: memory, power supply, drive, etc...
- Predictive failures
- Alert messages
I have the list of all the MIBs provided by Cisco but an having the following issues while loading them into HP SIM.
While loading MIB "CISCO-UNIFIED-COMPUTING-TC-MIB" I get the following error message:
Line 128: Error defining object: expected a label, found reserved symbol {
Line in MIB: SYNTAX Gauge32 {
Guage32 is imported from SNMPv2-SMI MIB
To get past this error I found a version of the MIB that removes all the textual conventions that where causing errors. I have attached the fixed MIB file to this discussion. With the fixed version of the MIB installed in SIM everything compiles and installs except the following two MIBS. CISCO-UNIFIED-COMPUTING-NOTIFS-MIBCISCO-UNIFIED-COMPUTING-CONFORM-MIB Questions:
1. Is there any way to get the CISCO-UNIFIED-COMPUTING-TC-MIB MIB to install correctly into HP SIM?
2. Is my MIB load order setup correctly?
3. Has anyone had success getting HP SIM to monitor and alert for Cisco UCS manager?
MIB Load Order:
SNMPv2-SMI
SNMPv2-TC
SNMP-FRAMEWORK-MIB
RFC1213-MIB
IF-MIB
CISCO-SMI
CISCO-ST-TC
ENTITY-MIB
INET-ADDRESS-MIB
CISCO-UNIFIED-COMPUTING-MIB
CISCO-UNIFIED-COMPUTING-TC-MIB
CISCO-UNIFIED-COMPUTING-FAULT-MIB
CISCO-UNIFIED-COMPUTING-NOTIFS-MIB
CISCO-UNIFIED-COMPUTING-AAA-MIB
CISCO-UNIFIED-COMPUTING-ADAPTOR-MIB
CISCO-UNIFIED-COMPUTING-BIOS-MIB
CISCO-UNIFIED-COMPUTING-BMC-MIB
CISCO-UNIFIED-COMPUTING-CALLHOME-MIB
CISCO-UNIFIED-COMPUTING-CAPABILITY-MIB
CISCO-UNIFIED-COMPUTING-COMM-MIB
CISCO-UNIFIED-COMPUTING-COMPUTE-MIB
CISCO-UNIFIED-COMPUTING-CONFORM-MIB
CISCO-UNIFIED-COMPUTING-DCX-MIB
CISCO-UNIFIED-COMPUTING-DHCP-MIB
CISCO-UNIFIED-COMPUTING-DIAG-MIB
CISCO-UNIFIED-COMPUTING-DPSEC-MIB
CISCO-UNIFIED-COMPUTING-EPQOS-MIB
CISCO-UNIFIED-COMPUTING-EQUIPMENT-MIB
CISCO-UNIFIED-COMPUTING-ETHER-MIB
CISCO-UNIFIED-COMPUTING-EVENT-MIB
CISCO-UNIFIED-COMPUTING-EXTMGMT-MIB
CISCO-UNIFIED-COMPUTING-EXTVMM-MIB
CISCO-UNIFIED-COMPUTING-FABRIC-MIB
CISCO-UNIFIED-COMPUTING-FC-MIB
CISCO-UNIFIED-COMPUTING-FCPOOL-MIB
CISCO-UNIFIED-COMPUTING-FIRMWARE-MIB
CISCO-UNIFIED-COMPUTING-FLOWCTRL-MIB
CISCO-UNIFIED-COMPUTING-HOSTIMG-MIB
CISCO-UNIFIED-COMPUTING-IMGPROV-MIB
CISCO-UNIFIED-COMPUTING-IMGSEC-MIB
CISCO-UNIFIED-COMPUTING-IPPOOL-MIB
CISCO-UNIFIED-COMPUTING-IQNPOOL-MIB
CISCO-UNIFIED-COMPUTING-ISCSI-MIB
CISCO-UNIFIED-COMPUTING-LICENSE-MIB
CISCO-UNIFIED-COMPUTING-LLDP-MIB
CISCO-UNIFIED-COMPUTING-LSBOOT-MIB
CISCO-UNIFIED-COMPUTING-LSMAINT-MIB
CISCO-UNIFIED-COMPUTING-LS-MIB
CISCO-UNIFIED-COMPUTING-MACPOOL-MIB
CISCO-UNIFIED-COMPUTING-MAPPINGS-MIB
CISCO-UNIFIED-COMPUTING-MEMORY-MIB
CISCO-UNIFIED-COMPUTING-MGMT-MIB
CISCO-UNIFIED-COMPUTING-NETWORK-MIB
CISCO-UNIFIED-COMPUTING-NWCTRL-MIB
CISCO-UNIFIED-COMPUTING-ORG-MIB
CISCO-UNIFIED-COMPUTING-OS-MIB
CISCO-UNIFIED-COMPUTING-PCI-MIB
CISCO-UNIFIED-COMPUTING-PKI-MIB
CISCO-UNIFIED-COMPUTING-PORT-MIB
CISCO-UNIFIED-COMPUTING-POWER-MIB
CISCO-UNIFIED-COMPUTING-PROCESSOR-MIB
CISCO-UNIFIED-COMPUTING-PROC-MIB
CISCO-UNIFIED-COMPUTING-QOSCLASS-MIB
CISCO-UNIFIED-COMPUTING-SOL-MIB
CISCO-UNIFIED-COMPUTING-STATS-MIB
CISCO-UNIFIED-COMPUTING-STORAGE-MIB
CISCO-UNIFIED-COMPUTING-SW-MIB
CISCO-UNIFIED-COMPUTING-SYSDEBUG-MIB
CISCO-UNIFIED-COMPUTING-SYSFILE-MIB
CISCO-UNIFIED-COMPUTING-TOP-MIB
CISCO-UNIFIED-COMPUTING-TRIG-MIB
CISCO-UNIFIED-COMPUTING-UUIDPOOL-MIB
CISCO-UNIFIED-COMPUTING-VM-MIB
CISCO-UNIFIED-COMPUTING-VNIC-MIB
References:
ftp://ftp.cisco.com/pub/mibs/supportlists/ucs/ucs-manager-supportlist.html#_Toc303691433
http://www.hp.com/wwsolutions/misc/hpsim-helpfiles/simsnmp.pdfPlease post "debug ccsip messages".
Based on your debug you are getting "Cause No. 38 - network out of order."
You may want to bind SIP to an interface that the IP address is defined which Lync points to.
Chris -
Cisco Call Manager Administration Page Drop down menu not working
I'm running the mobile app browser on my Xoom tablet and when I log into Cisco Call Manager Administration page I get the menu's but it will not pull down the options. The same issue happens in google chrome. I use your browser on my desktop and have no issues logging into Cisco Call Manager Administration page and getting the drop down menu's to appear but the mobile version of your browser is not working. Is there a work around? I tried changing the UAString to Desktop, iPad etc and the issue is still there.
Thanks but I've tried all that. It happens in Chrome also. I've tried Opera and it works on that. I've read other forums and it looks like a Java script issue that Chrome and now Firefox Mobile cannot seem to resolve. My preference is Firefox and I'm sure as more tablets get out then this will be solved at some point. I just don't know how it is prioritized. I do know that in order for Androids to be viable in the business sector they need to address issues like these with a higher priority.
-
Starting a Cisco call manager express
I have a cisco 2651 with Cisco call manager express.
I have too 15 IP telephones 7902G
The configuration is in factory default.
Ì have to create an IP pbx and extensions of a municipality with that components.
I's like that anybody helps me in the starting configuration, Where can I find good documentation about a tipical case like this?
I have a lot experience in networking and IP telephony but I'm newbie in CCME.
RegardsTo begin the configuration use "telephony-service setup" command which will prompt you for some of the basic configuration ie how many phones, starting DN, etc. To add additional feature refer to the admin guide provided by Jorge link.
Chris -
IPS Tech Tips: IPS Best Practices with Cisco Remote Management Services
Hi Folks -
Another IPS Tech Tip coming up and this time we will be hearing from some past and current Cisco Remote Services members on their best practice suggestions. As always these are about 30 minutes of content and then Q&A - a low cost high reward event.
Hope to see you there.
-Robert
Cisco invites you to attend a 30-45 minute Web seminar on IPS Best Practices delivered via WebEx. This event requires registration.
Topic: Cisco IPS Tech Tips - IPS Best Practices with Cisco Remote Management Services
Host: Robert Albach
Date and Time:
Wednesday, October 10, 2012 10:00 am, Central Daylight Time (Chicago, GMT-05:00)
To register for the online event
1. Go to https://cisco.webex.com/ciscosales/onstage/g.php?d=203590900&t=a&EA=ralbach%40cisco.com&ET=28f4bc362d7a05aac60acf105143e2bb&ETR=fdb3148ab8c8762602ea8ded5f2e6300&RT=MiM3&p
2. Click "Register".
3. On the registration form, enter your information and then click "Submit".
Once the host approves your registration, you will receive a confirmation email message with instructions on how to join the event.
For assistance
http://www.webex.com
IMPORTANT NOTICE: This WebEx service includes a feature that allows audio and any documents and other materials exchanged or viewed during the session to be recorded. By joining this session, you automatically consent to such recordings. If you do not consent to the recording, discuss your concerns with the meeting host prior to the start of the recording or do not join the session. Please note that any such recordings may be subject to discovery in the event of litigation. If you wish to be excluded from these invitations then please let me know!Hi Marvin, thanks for the quick reply.
It appears that we don't have Anyconnect Essentials.
Licensed features for this platform:
Maximum Physical Interfaces : Unlimited perpetual
Maximum VLANs : 100 perpetual
Inside Hosts : Unlimited perpetual
Failover : Active/Active perpetual
VPN-DES : Enabled perpetual
VPN-3DES-AES : Enabled perpetual
Security Contexts : 2 perpetual
GTP/GPRS : Disabled perpetual
AnyConnect Premium Peers : 2 perpetual
AnyConnect Essentials : Disabled perpetual
Other VPN Peers : 250 perpetual
Total VPN Peers : 250 perpetual
Shared License : Disabled perpetual
AnyConnect for Mobile : Disabled perpetual
AnyConnect for Cisco VPN Phone : Disabled perpetual
Advanced Endpoint Assessment : Disabled perpetual
UC Phone Proxy Sessions : 2 perpetual
Total UC Proxy Sessions : 2 perpetual
Botnet Traffic Filter : Disabled perpetual
Intercompany Media Engine : Disabled perpetual
This platform has an ASA 5510 Security Plus license.
So then what does this mean for us VPN-wise? Is there any way we can set up multiple VPNs with this license? -
Is it possible to integrate Nokia E62 with Cisco Call Manager 4.x?
The Nokia E-61 can be integrated with Cisco Call manager 4.x using a Nokia Call Connect 1.0 client.
1.Is it possible to do the same with Nokia E62.If it can be done,what would be the requirements?
2.Is Nokia E-62 PDA a Cisco Compatible Extension device?Thanks a lot for the prompt reply.You are right in saying that nokia and cisco are increasing the number of models supported.Infact the E65 has already joined the club.But my point of interest is the nokia E62 in particular.This Nokia E62 device
1) does not support WLAN interface(while E61,E65 does).
2) It is not Cisco Commpatible extension device.(I did not find E62 in the list of Cisco Compatible extensions.chk out the attachments for more info).
3)It is not compatible with Nokia Intellisync CAll Connect 1.0(while E61 and E65 are compatible.chk out the attachment for more info).
I found this rather weird and i wondered if Nokia E62 can be integrated with Cisco Call manager ,especially a device which is not Cisco compatible.The only possibility i can see from your answer is that the Nokia E62 might not be SIP enabled(correct me if i am wrong here!)
My objective is to send a message from a CUAE script to a nokia E62 device.Please excuse me if my posting is not in the right place.i would be highly grateful to you if you could give me pointers to an appropiate location where i can get my queries answered. -
Cisco Call Manager and MGCP Question
Hello,
I appreciate if somebody can help.
Scenario:
Site 1 PSTN E1----VG----Call Manager----VG--- PABX---Site 2 PSTN1 E1
I have configured a dialing pattern on Cisco call manager 6.xxxxxx to Send to VG on Site1
Both VG routers are using MGCP with call Manager.
The problem if from Site 2 tries to call 6xxxxxx the call manager is not routing the call to the VG in site 1.
I did debug ccapi inout and on Site 2 VG the call response was the number unassigned. This means that the call Manager is searching the directory for the destination but it is not searching the route patterns.
Any ideas to override this and ask the call manager to check it's destination pattern?
Thanks,Problem solved. The VG in Site 2 was in a CSS that is not allowed to dial PSTN.
Regards, -
Cisco Call Manager free license for training purpose.
I am going to setup a Cisco IP-Telephoney lab & looking for Cisco Call Manager free software license (What is Cisco has authorized for this purpose).
Is there any available?
Please help me.Duplicate thread of
https://supportforums.cisco.com/thread/2181741
Do not SPAM the forums. -
Cisco Call Manager 8.5 and Lync 2013
Dear all,
Our customer wants to integrate their Lync 2013 to the Cisco Call Manager 8.5.
Out of some not so recent information i thought that if u want to use the enterprise voice of lync you'll have to make a sip trunk between Cisco Call Manager & Lync 2013.
I think that this still counts, i've also heard that there have been a moderate amount of changes between cucm 8.5 and cucm 8.6 on matters of sip.
I'm unable to find them though, also what does CUCI - Lync do?
Kr,
Yannick VranckxHi Yannick,
There can be three types of integrations between Lync and Cisco Systems
1) Direct SIP Trunk between Lync Server and Call Manager - In this, we can setup shared line between Cisco extensions and Lync extensions, and Sip trunk between the servers. Any Cisco phone / Lync client can call each other vice-versa. Initial setup needs planning, but later it does not need much configurations in client side. The following document explains the configurations needed.
http://www.cisco.com/en/US/docs/voice_ip_comm/cucilync/9/CUCI_BK_C0B36AC1_00_cisco-uc-integration-for-microsoft.pdf
2) CUCILYNC, which is like Cisco Jabber client but connects with Lync and Call Manager: Lync Client <----> CUCILYNC <-----> CUCM
In this option, a plug-in is installed in each client side. Although initial configurations is easier, each user needs to install the client and operate it. The below document explains the configuration and setup.
http://www.cisco.com/en/US/docs/voice_ip_comm/cucilync/9/CUCI_BK_C0545A41_00_cisco-uc-integration-for-microsoft.html
3) RCC (Remote Call Plugin) which just provides basic call control feature but for that you need Cisco Unified Presence Server: Lync Client <----> CUPS <-----> CUCM
HTH
Manish -
Cisco Call Manager TFTP requests.
I was looking to see if there was a way to look at what devices request config files from a Cisco Call Manager TFTP server.
I know that you can use RTMT to look at the total number of requests made, but is there a way to know what device make the request.
Thanks in advance,
RobertYou could do this by doing a packet capture on the server as described in the link below
https://supportforums.cisco.com/docs/DOC-11599
Maybe you are looking for
-
Hyper-v 2012 R2 Live migration issue in 2003 Domain function Level
hi Team , i recently build 2012 R2 Hyper-v Cluster with three node. Everrything working fine with out any issue . Cluster working also fine. Later i came across one issue when tried to Live migration virtual machine from one host to another . it fail
-
Hi, Has anyone implemented SOAP over TCP/IP sockets instead of using a web server? Does JWSDP support this? Any information and pointers on how to implement this is highly appreciated. Thanks in advance. Amogh
-
i have my music and video library on a external hard drive and every time that i unplug it to move my laptop. itunes re-maps my source folder to the default c drive one which has nothing in it. the next time i open itunes it tells me that it cannot f
-
Having trouble with downloading flash player
first of all, I have a mac (mac os x v. 10.4.8 with a intel core 2 processor (mayby it's important for you to now wich version)) One month ago I tried the macromedia flash demo, now the try-out had past his 30 days I trowed it of my computer. With th
-
Former FCP7 user who last year switched over to Adobe Premiere Pro CC and considering coming back to Final Cut via FCPX. MY PROJECTS: 100% AVCHD 24 to 35 mbps, from Canon DSLR's, Canon Camcorders, and GoPro Hero 4 Silver. Most videos are multicam of