Is there a way to integrate Active Directory (Child Domain) to Cisco Secure Access without any involving any Enterprise Account?Our setup with Cisco Secure Access and Active Directory integration using domain and AD connector, when installing AD conn...
Forum Posts
The customer has already deployed Umbrella DNS protection with AnyConnect client and now they want to utilize CDFW and web proxy. I was wondering what is the default behavior in Umbrella for forwarding traffic for HTTP and HTTPS if you have AnyConnec...
Resolved! Managing Cisco Secure Access IP pools
It looks like once you created an IP pool and assigned it a region, the region cannot be changed anymore afterwards?How would you go about that? At this moment, the only way around is deleting that specific IP pool al together and start over again wi...
Hello everyone,First post here, hopefully this is the right place.We use Cisco Meraki in our offices, and use Radius/NPS to authentication our end users against the onprem Active Directory.Since we are migrating to Azure AD (not related to the onprem...
I am experiencing different "Issued by" validation of the certificate, it should be by Umbrella no matter what sites are either allowed or blocked. Like this: am I right?But when I checked it using a different website, it showed different "Issued by"...
We want to test Umbrella CDFW for a specific set of users and as far as I know CDFW does not support identity as a source in the policy rules. I was wondering if we can set in the CIDR field as a source a private RFC 1918 segment from our organizatio...
Im getting an error "Invalid SAML response" when trying to enroll users from secure client zta, I have authenticated through duo, I tested the configuration of SAML authentication in Secure access and appears to be completed. Asking assistance on how...
Good day. We are looking at testing out deploying Cisco ASAv and/or FTD in Azure as part of new requirement. Question I have is it possible to set up high availability (Active/Standby) between two different regions (ie. Active is in one region and st...
Hi All, Have some query regarding Wsa model S196 1. As per below document upgrading wsa to 15.2.0-164 Async OS will not support M2, data interface 1 & 2. PFB snapshot and reference link https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa-15-2/rele...
Resolved! Umbrella-Meraki Integration
Hello, I have a couple of questions regarding the Umbrella-Meraki integration. A customer just did an integration and we can now see some MX devices are now showing up in the Umbrella portal under network devices. However almost all of them are showi...
Hi All, Need to install WSA model S196 into my network as an Explicit forward proxy. Should i need to connect/configure port M1 for management and P1 for proxy traffic or any other port also.
Hi needing for assistance on how to use zero trust access for internet destinations. I am testing for users who connected to secure client zta to allow or block internet destinations. I created internet destinations and access policy for internet acc...
Resolved! Cisco Secure Access change time zone
Is there any chance that I can change the time zone of Secure Access? When I go to Monitor > Activity Search and check the time, it is not synced for the time I try to access private apps. Seeking assistance on how to resolve this. Thank you.
I have been struggling allowing specific youtube videos. Are default filter blocks streaming media, and as a result when a user goes to youtube, they are blocked. Occasionally, I have been asked to allow specific videos, and as such I have added th...
Is it possible to integrate our umbrella environment with our Meraki MX devices without having to purchase secure connect?
