Trending Topics
Cisco Community is an active and collaborative place to learn more about our products and ask questions of peers and Cisco experts! Check out some of the most popular conversations happening right now!
-
Expired SHA-2 (Oct 4, 2025) cert keeping APs from joining WLC
by benjammin1001 -
SNTC pulling the serial number for FPR1120-NGFW-K9
by pyanota -
Cisco Firepower 1010 Vpn configuration
by pedrozadany30 -
DLP AI Guardrail and RealTime for Source code
by Daniel Stefani -
Can I manipulate ASAv outside interface private IP to establish IpSec?
by sudsark -
CW9176I AP joined to 9800cl however no 5ghz or 6ghz bands operational.
by scooter33 -
GNXi State Enabled Status Down
by a.mitsova -
CSCwp83335y to Remove Calendar Invites When Remediating Meeting Emails
by dukebox
Community Activity
Routing External IP via VPN Tunnels
I hope someone can help me find an answer to this scenario. We have another organization with which we have a site-to-site tunnel. This tunnel is located at our home office. Our remote sites have site-to-site tunnels to the home office. The other org...
GA Release of the Cisco Cloud Security Add-on and App for Splunk v8
Customers who use Secure Access/Umbrella and Splunk use the- Cisco Cloud Security Add-on for Splunk to bring their logged events into Splunk from AWS S3 (from either a customer or a Cisco Managed bucket). The Add-on then extracts fields and maps the...
Expired SHA-2 (Oct 4, 2025) cert keeping APs from joining WLC
Hey all, This is a new problem a lot of folks might be seeing soon as the SHA-2 cert that comes with AirOS 8.5.182 just expired Oct 4th, 2025. You know - this message in the AP logs: *Mar 1 00:01:41.335: AP has SHA2 MIC certificate - Using SHA2 MIC...
Route Pattern to Route certain extensions into an XCAPI SIP Trunk
Hi all, in need some help, hope i can explain my problem correctly.Our company uses a third party contact center solution and we have different call center extensions for each departement.The SIP Trunk connection works fine between Callmanager and co...
Resolved! Cisco ISR 1100 missing Crypto isakmp commands
Hello, I am trying to setup an IPSec VPN to a set of firewalls and I don't appear to have the isakmp commands under crypto. I read another post that I may need a separate license, is that still the case? Thanks for your help! (config)#crypto ?...
Public certs removing client authentication breaking Expressway
I just received my first publicly signed certificate that does not include the client authentication key usage. Apparently this is an industry change happening: https://www.sectigo.com/resource-library/tls-client-authentication-public-ca-end-2026#...
Migration of Certificate Issuer to Cisco PureCA – Action Required
Cisco is migrating the Certificate Issuer service from KeyFactor to our in-house solution, Cisco PureCA, to streamline certificate management. This migration impacts all existing and new Resource Connector instances. Key Information: Action Req...
What populates the outgoing SIP update from CUCM?
Our customer is using CUCM with a SIP trunk to CUBE, the CUBE dial plan sends some calls to a third party. The call flow is:ITSP -> SIP -> CUBE -> SIP -> CUCM -> SIP -> CUBE -> SIP -> Third Party. The CUCM part of the call is answered by an operator ...
ISE certificates
Hi, If you have 2 cisco nodes in a cluster, one primary and one secondary and I need to update the System certificate that has a bind between the nodes. How do I do this? Do I need to take the secondary out of the deployment and generate a certificat...
QoS Scheduling before or after IPSec enryption
Hello,I am a little confused about the following statement on the document Security and VPN Configuration Guide, Cisco IOS XE 17.x - IPsec Anti-Replay Window Expanding and Disabling [Cisco IOS XE 17] - Cisco"Moving QoS scheduling before the encryptio...
Resolved! Cisco Firepower 1010 Vpn configuration
Hi Community,¿It is possible to configure a client VPN using IPsec without License or use the SSL certificate and key?I only found this link: https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/215532-configure-remot...
SNTC pulling the serial number for FPR1120-NGFW-K9
Using SNTC to validate contract coverage on firewalls determined that SNTC was reporting a child serial number instead of the parent serial number for a pair of FRP1120-NGFW-K9 firewalls. This results in an error on contract coverage reporting as th...
CW9176I AP joined to 9800cl however no 5ghz or 6ghz bands operational.
Hi,i have a CW9176I joined to 9800cl however no 5ghz or 6ghz bands operational. They are admin up but not operational.syslog shows a few of these:%APMGR_TRACE_MESSAGE-6-WLC_APMGR_INFO: Chassis 1 R0/0: - 9056.7189.d600 Setting country code to Access P...
DLP AI Guardrail and RealTime for Source code
Hello, I am testing Secure Access DLP Feature to block ChatGPT Source Code DLP in Download & Upload directions. Only Upload direction works. Can you help me ? Best Regards, Daniel Stefani
GNXi State Enabled Status Down
Dear community, Does anyone have experience of using GNXi on XE 17.12.05? We use the GNXi secure-server for telemetry data, and it appears that our Catalyst 9300 switches are sending data to a third-party collector. The problem is that the GNXi state...
