Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Explore the security forums and share your expertise about firewalls, email and web security, Identity Service Engine, VPN, AnyConnect, Duo, Umbrella, Secure Access and more.
I have notice when adding switches to new network, the API to gather information about switch ports, it returns "Null" for short period {"portId": "1","name": null,"interface": {"name": null,"switch": null,"module": null,"slot": null,"subslot": null,...
Can anyone share ways to expand beyond the limitation of 700-800 authorization policies in ISE? I have a customer (new network design) with 400+ sites and 2+ authorization rules per site. Their desire goes well beyond what the ISE documentation say...
Feature OverviewCisco Secure Access now enables administrators to apply supported geographic conditions across internet and private-access scenarios. The capability brings policy configuration, automation, enforcement, and event context together so s...
Hello Cisco Security Team,Our legitimate business website palummu.com (SaaS) is being blocked at the DNS level — public resolvers (8.8.8.8, 1.1.1.1) return REFUSED for the domain, and Cisco Talos lists it with a "Questionable" web reputation.We have ...
Currently have an FTD setup and managed by an FMC with a publicly signed certificate assigned and in use for remote access users with a SAML integration. That is working without any issues. I now wanted to add a 2nd connection method for some mobil...
Hi Experts,Currently all our phones in the estate using default vlan and getting and IP to connect to the network.Phones are coming to its end of support hence new phones being asked to assigned to a dedicated vlan.I am thinking of using dynamic vlan...
Hi, In ISE deployment, we have a posture condition for patch management, (up to date, check for missing critical patches).The windows update agent version is 1510.xThis is not available on the ISE 3.3.I would like to also confirm if we need to integr...
Hello!We have one of our users who had to temporarily switch his Cisco Duo App to a spare old phone running Android 9 until he purchase a new phone to replace a broken one. He followed procedure to install 3.34 APK then update to 3.62 APK which is la...
It would be great if we had the ability to manage the Directory Sync configuration from the API. This would allow for us to completely automate a child account setup. We could use the values to write the authentication proxy configuration without any...
I have issues with the way how Cisco designed the ISE service to be restarted every you time you make changes to the DNS and/or NTP configuration. The underlying system is based off Redhat Linux, so what actually changes is under /etc/resolv.conf fo...
My Instagram account is locked behind an authenticator-app 2FA code. I originally set up Duo Mobile when I subscribed to Meta Verified. I cancelled Meta Verified and later deleted Duo Mobile. I know my Instagram password and I am the owner of the acc...
Just an FYI as this one was hard to find. All of our developers on MacOS Tahoe and the latest version of the Cisco Secure Client have the issue.### Root Cause Analysis of Spindumps 1. **Process Identification**:* The affected process is `cscan`, loc...
Feature Overview Cisco Secure Access now protects Remote Access VPN against automated password-spray attacks through complementary automatic and manual IP-blocking capabilities.Automatic threat detection: Uses the ASA threat-detection service to iden...
1. Feature Overview & Release Notes ReferenceStarting in Cisco Identity Services Engine (ISE) Release 3.3 (and carried forward into ISE 3.4 and ISE 3.5), Cisco introduced the feature:"Enhanced support for unvalidated operating systems releases in pos...
Hi Cisco Community Experts,I am encountering a persistent deployment issue on Cisco FMC 7.6.5 when deploying policies to an FPR-2110 FTD managed via a Data Interface (Ethernet1/1, nameif: outside).Deployment fails at the snapshot generation stage wit...
