Cloud Security

Hello everyone,First post here, hopefully this is the right place.We use Cisco Meraki in our offices, and use Radius/NPS to authentication our end users against the onprem Active Directory.Since we are migrating to Azure AD (not related to the onprem...

We are implementing endpoint SWG using the Umbrella Module and Secure Client and we have noticed an increase in the time it takes to load a web page. This is especially true for sites with a lot of CDN content (advertisements, video, etc). Since the ...

While creating acl for connecting to checkpoint vpn, already enabled ports tcp 443,500,udp 259,500,2746,4500 ESP,AH,SKIP. But still got stuck in 47 % while connecting from client laptop on checkpoint vpn as we allowed URL cvpn.****.comAs there is no ...

Are there best practices for using Umbrella to control the use of generative AI and ML?   Our intention is to block all AI-generated applications by default, including new sites, and then gradually allow AI-generated applications once we have confirm...

Hello team,I would like to ask about Get All Tunnel Groups API call for cisco sse. If you use this call, datacenter IPs for respective hubs are not returned. But when you use that call with /<id> to get only one tunnel group, datacenter IP is returne...

Hi All, Is it any limitation enteries we can upload under global block list in umbrella. As i'm not able to upload more than 7990 enteries.

I'm hoping I'm blind and just overlooking it but is there not a way to copy/clone polices and destinations lists in Umbrella?

Can I deploy Cisco Secure Access (SIA/SPA) if my customer's local LAN is built on a global IP range?Currently the customer's internal local LAN uses global IP. The global IP will be discontinued in the future.

A few days ago I started getting complaints from users that they were having problems getting into American Express website. The homepage would load, or partially load and the login page would only ever partially load. Upon getting access to a users ...

Hi, If I understand correctly, after enrolling in Client-based ZTNA, I don't need to re-enter credentials unless we unenroll. My question is, do I need to enforce periodic re-enrollment in Client-based ZTNA?Because, personally, I thought that enforci...

Hi Expert,I found that we will be able to disable ZTNA in a Trusted Network (On-Network) environment in a future release. What kind of situations require such a feature?Personally, I think ZTNA is based on the principle of trusting no one, both withi...