Security

Microsoft Entra ID Integration with Secure Network Analytics

Single Sign-On (SSO) is now a critical element for modern organizations, effectively balancing seamless user access with strong security. As a leader in Network Detection and Response (NDR), Secure Network Analytics (SNA) offers integration with a ra...

Entra External Authentication Method errors: AADSTS900144

Hi all,Has anyone else noticed in the last couple of days if EAM (External Authentication Method) is configured for MFA with DUO in Entra and some end users are getting:AADSTS900144: The request body must contain the following parameter: 'externalAut...

Downtime for certificate renewal - ISE 3.2

We have an ISE 3.2 distributed deployment (2x admin, 2x MnT, 4x PSN). We're using a multiuse certificate for Admin, EAP Authentication, RADIUS DTLS, and Portal usages. We have multiple wireless controllers that each have the four PSNs specified (9800...

Recovery of "admin" password in CIsco ASAv runnin on AWS

Hi All, Need help- while doing some automation seems like admin password has been resetted in the ASAv runnin on AWS. Is there any reference document exsts which show recovery process for admin user ? Is that possible ? Please suggest  Thanks- Tublai

GA Release of Trusted Network Detection for Client-Based ZTA

We are excited to announce the General Availability (GA) of Trusted Network Detection (TND) for client based Zero Trust Access (ZTA) in Cisco Secure Access. This feature empowers administrators to configure Cisco Secure Client to automatically pause...

patch ISE server from 3.3 patch-4 to patch-6 via CLI

I do not have a test environment to test so I am asking here.  I have a five nodes cluster environment 3.3 patch-4 and I need to get them to patch-6, in a safe way.  My environment:node1:  Primary Admin, Secondary MnTnode2:  Secondary Admin, Primary ...

Configure AnyConnect VPN digicert on FMC 7.6.0 or 7.4.2

I have used openssl to create a CSR and used digicert to create the certificate, intermediate and root. I have the signed certificate ready to install on the FMC - What is the correct order to configure the certificate on the FMC ver 7.6.0 - Is the o...

Do different Cisco ASAs handle IPSec tunnels differently?

I have on my network two different models of Cisco ASA which seem to operate differently from each other.  Can anyone confirm that this is the case?Device type A is a Cisco Firepower 4120 running ASA version 9.18.(4)34 in Multi-Context mode.When conf...

User and Machine Authentication

Hello Am having troubles getting my WIFI to work with machine authentication and user authentication i keept trying to reauthenticate every time im not really sure why it doing it at the machine authentication part, but it get that correct. this is w...

Can I restore ASA running config into ASAv ?

HI There, Wondering if we could simply restore running config backed up from one CISCO ASA device to a virtual ASAv ? My question is more on recovery standpoint, say I need to setup a new ASAv in case of DR situation, can I just restore the backed up...

OpenDNS not resolving - Cisco Umbrella

In the last few weeks we have issues with openDNS which does not resolve hosts, but other DNS do.At the moment it is e.g. frank-meisler.com. OpenDNS does not resolve, but EU-DNS, Cloudflare and Google-DNS do resolve it.Paying a lot of money for this ...

Unlock the full potential of ISE

New Feature: Scheduling for Internet Rules is Generally Available

Feature Overview The Scheduling for Internet Rules feature is now generally available in Cisco Secure Access. This new capability allows administrators to create and apply time-based schedules to internet access rules, providing granular control ove...