We experience inconsistent user experience when using the internal network or on-network, there are times that we can access the site or not and no logs are captured. We are using AD users' identities only that shared information with roaming client....
Forum Posts
Hello, I have a customer that wants to run posture checks on some of the client VPN connections. This is only required for consultants, where the customer doesn't control the end-user’s client devices. We had a pilot project last year where we used I...
I have a Global VPC in GCP in two regions, unfortunately the Cisco Multicloud Defense gateways are regional so I cannot connect two gateways in different regions to the same VPC. Any ideas??I need traffic automatic switch between región if something ...
I´m trying to order through CCW Cloud Protection Suite using the SKU CLDPRT-SEC-SUITE which is on Ordering Guide however when input it in CCW it says is EOL. Tried to find the replacement but I didn´t find it. Does anybody has any insight? Thanks.
When creating the IP pools for vpn in secure access, you have to configure 2 pools for each region - an endpoint pool and a management pool. The endpoint pool is obvious and is the pool of ip addresses that will be assigned to the vpn users when the...
Happy new year everybody! please allow me a question because I have some problems in the understandig of the end user behavior when it comes to access of Private Application which can be achived via Client-Based ZTNA and ones which are only available...
Hi All, Wsa model S196 management port M1and Proxy P1 and P2 are Rj45 port or SFP type ?
Is there a way to integrate Active Directory (Child Domain) to Cisco Secure Access without any involving any Enterprise Account?Our setup with Cisco Secure Access and Active Directory integration using domain and AD connector, when installing AD conn...
The customer has already deployed Umbrella DNS protection with AnyConnect client and now they want to utilize CDFW and web proxy. I was wondering what is the default behavior in Umbrella for forwarding traffic for HTTP and HTTPS if you have AnyConnec...
Resolved! Managing Cisco Secure Access IP pools
It looks like once you created an IP pool and assigned it a region, the region cannot be changed anymore afterwards?How would you go about that? At this moment, the only way around is deleting that specific IP pool al together and start over again wi...
I am experiencing different "Issued by" validation of the certificate, it should be by Umbrella no matter what sites are either allowed or blocked. Like this: am I right?But when I checked it using a different website, it showed different "Issued by"...
We want to test Umbrella CDFW for a specific set of users and as far as I know CDFW does not support identity as a source in the policy rules. I was wondering if we can set in the CIDR field as a source a private RFC 1918 segment from our organizatio...
Im getting an error "Invalid SAML response" when trying to enroll users from secure client zta, I have authenticated through duo, I tested the configuration of SAML authentication in Secure access and appears to be completed. Asking assistance on how...
Good day. We are looking at testing out deploying Cisco ASAv and/or FTD in Azure as part of new requirement. Question I have is it possible to set up high availability (Active/Standby) between two different regions (ie. Active is in one region and st...
Hi All, Have some query regarding Wsa model S196 1. As per below document upgrading wsa to 15.2.0-164 Async OS will not support M2, data interface 1 & 2. PFB snapshot and reference link https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa-15-2/rele...
