Always had this NAT'd to internal PSNs, but now we need to stick PSNs in the DMZ only for this function as per infosec.When considering ACLs, what would we need to consider?- Realistically I'm probably going to configure full IP access to internal IS...
Forum Posts
I have Cisco DNAC and Aruba ClearPass (NAC) so I need configure ArubaClearPass as a External Authentication for DNAC GUI via TACACS+ , its applicable or not, Please If it is applicable share document for it wit me.
Hello, When integrating cisco Secure Cloud Analytics into Cisco XDR, I came across the following obstacles. 1. in the overview of XDR integrations of other services, SCA is always followed by +Enable. Even after performing the integration, this view ...
I am new to cyber security, I am taking the netacad Ethical Hacker course. One of the labs contains a spiderfoor scan.I tried to do it it through kali linux installed on virtual machine but when I entered any domain name an error message appears re...
Since ISE 2.7 is end of support, how are you guys dealing with this?Is anyone still on ISE 2.x, or everyone migrated to ISE 3.x?Migration to 3.x is hard i believe as we have to recreate the policies from scratch.
Hi there,We recently install the Cisco Security Cloud App for Splunk.I configure the eStreamer services on our FMC (ver 7.4.2.1).I am seeing Connection Events in Splunk.According to this article:https://www.cisco.com/c/en/us/td/docs/security/firepowe...
Hi, I am encountering the following error while upgrading to version 5.1.4.74 of Cisco XDR Secure Client. The devices have Umbrella, ISE posture, and network visibility modules with version 5.1.3.62, but they are not working. Although the programs ar...
I am aware that Cisco SDWAN solution also offers security features such as Firewall, IPS, URL Filtering, AMP, DNS security, TLS proxy. I believe we can enable firewall feature alone or we can use one or two or all other features or functions (example...
Hi Everyone, i am trying to figure out if i can protect the LAN interfaces of a Firepower Firewall via 802.1x (in combination with ISE).Unfortunately, i haven‘t found reliable information on the internet or in Ciscos documentation.… hope some one wit...
Hi Folks,Can anyone know how to configure a email notification to the end user if his device is non complaint?1.for example he is not installing anti virus or his device is not in the required patch level as a network administrator i need to inform t...
Hi, I am looking for an option to remove the default and manually set values so that the values of my rules are applied. Or is there a bug that prevents rules from overwriting previously set values? Thanks in advance!
Dear Cisco ISE lover, I would raise some inquiry regarding to any bug on machine authentication (TLS) and User authentication (MSCHAPv2) while we use to met this issue which resolved by Disable RSA_PSS which related to issue on TPM and Microsoft upda...
Baltimore CyberTrust Root is expired. As we found it on Trusted Certificates on ISE. This certificate will expire soon. When it expires, ISE may fail when attempting to establish secure communications with clients. Inter-node communication may also b...
Dear Cisco ISE lover,I would like to seek your support as I have an inquiry related to Cisco ISE behaviour access to switch port via port 22. While the figure below, there is no connection request from ISE to NAD or Switch. If there the normal proce...
Noticed my firewall was failing to download the talos blacklist file and when I clicked on the link it said I’m being blocked because of suspicious or malicious behavior but only my firewall accesses it just to update the list periodically. I guess t...
