Good afternoon! I've setup Duo with a Generic SAML 2.0 application as a service provider. Authentication appears to work without issue and I see it carrying over the email address that is the email address of the account on the service provider. H...
Forum Posts
Hi All, I have to deployed Ftd Firewall (with Threat & malware protection licenses), WSA-S196-K9, and Umbrella in same Data Center. Need to know how does http, https traffic inspection would be here, and which device comes in which place.
Hello,I am following up on my ticket as I have only received an automated response, which did not address my issue. I have also sent an email to talos-external@cisco.com and would like to confirm if I can expect a reply from someone regarding my inqu...
Hi Guys! Recently one of our Cisco Security Appliance (Secure Cloud Email) started bouncing back too many outbound emails, it's there any way to choose in which one the emails go thru?Regards!
We are in the process of setting up a POC with Secure Access but are facing an issue that is hard to understand what's wrong.AD connector is trying to upload and sync some data to the cloud but is not able to, and eventually throws an error message.F...
Hey, Can anyone know why SA is only able to integrate with Okta/Azure to download user/group info and not with DUO? There is an option to integrate with "other IdP" but I am not able to find the info about the integration with DUO. Can someone tell m...
Hi everyone,I wanted to block WhatsApp completely on the network.Application settings were used to block WhatsApp and destination lists were created and whatsapp.com & whatsapp.net added.I can still access the pages. I am not seeing events for this t...
My network environment strictly only allows web traffic through a security appliance or service, therefore any traffic direct through the firewall is blocked.Configuring my internal domain in domain management works for internal sites when internal b...
Hi All, Is it possible to have scheduled reporting for the below on cisco umbrella? Security Activity Report (Security Category : C&C, Cryptomining, Malware, Phishing, Dynamic DNS etc) Applications report (applications, app categories, technology ca...
Resolved! Upgrade Ubuntu on VA Connectors?
The Hyper-V image for the Cisco VA connectors, even the ones I downloaded today, are running on Ubuntu 20.04, which is outdated and has a ton of critical vulnerabilities. Does anyone know if there is a way to upgrade the OS on a VA connector? Or do w...
The certificate errors related to 516 Upstream Certificate CN Mismatch are becoming very problematic for our company. Marketing emails are particularly problematic, and this is disruptive to our staff when trying to sign up for webinars and other "no...
Has anyone here experienced configuring local users in Secure Access, where you only input the users' email addresses without using an identity provider or Active Directory (especially manual upload that exported from active directory)? In other vend...
Hello,I am configuring SAML SSO in Umbrella portal.In the portal the metadata to add to my IDP uses EntityID "https://login.umbrella.com/sso"This works correctly when I test my SSO configuration.But when I update my IDP to use the Umbrella metadata U...
Hello, Let's say that I want to build a security policy where source is equal to MS AD group (users/groups will be provisioned through AD connector). My question is the following. How does firewall feature of SA know about IP-user mapping? According ...
Hi there, I hope you're doing well. Could you share the official Cisco Umbrella documentation with me, which mentions the port requirements and rules I must configure in my perimeter firewall for Cisco Umbrella to work properly? Kind Regards, Josué...
