Is there a roadmap for secure access regarding posturing for managed and unmanaged devices without using duo? Since duo has the capability for that such trusted endpoint and separate posturing for managed and unmanaged. In our case, we don't want to ...
Forum Posts
Is there a way to resolve the issue on unmanaged endpoints with ZTA client, where users can access internal applications, but the site's certificate appears as "not trusted" when checking the site information?In contrast, on managed endpoints with a ...
Resolved! It's like typing a bypass code in Duo
Try to use Cisco Secure Access, log in to Once you reach Duo, "Enter the bypass code Please enter the code from the IT help desk to verify that you are the one you are." The message appears. Until yesterday, the phone authentication was progressing...
Hi Its my understanding from previous machine tunnel configurations on ASAs/FTDs, that the machine tunnel XML profile name needs to be 'VpnMgmtTunProfile'. However, when I download the machine tunnel XML from Secure Access the file name is 'machine-t...
What's the difference between these two solutions? I'm very curious since they seem to serve the same purpose. When should we propose Secure Access, and when should we propose Secure Connect?
Resolved! VPN Client authentication with ISE
Hi,I have configured our on-prem Cisco ISE server for RADIUS client authentication when users connect using Secure Client. The VPN authentication requests reach the ISE server, the user is correctly authenticated and ISE returns an "Access-Accept" to...
Hi AllWe are currently migrating a customer from Umbrella to Cisco CIA and in the past we were able to send the customer an “executive report” without having to build anything. Unfortunately, I can no longer find a way to do this. Has anyone found an...
Hi,I have configured our on-prem Cisco ISE server for RADIUS client authentication when users connect using Secure Client. The VPN authentication requests reach the ISE server, the user is correctly authenticated and ISE returns an "Access-Accept" to...
Please explain the concept described for Network Tunnel Groups. 1. Can we create one Tunnel Group with Hubs and connect multiple sites using its settings - up to the limit described in the link below. OR 2. We create one Tunnel Group with Hubs per si...
Hey Techies,Is there a way to test Internet Access policies within the Secure Access dashboard?I'm looking for something similar to the Policy Tester feature in Cisco Umbrella, which allows us to validate WEB/DNS policies.Appreciate your guidance—tha...
Hello Cisco Community ,I’m new to Cisco Secure Access and I’m really excited to explore this powerful solution.I want to understand it step-by-step, build a lab setup, and go deeper into how it works in real environments.Here’s what I’m planning:1. U...
Thank you for your help.Please check the technical specifications of Cisco Secure Access. How does Secure Client (AnyConnect VPN) determine which region Secure Access is connected to? When you assign multiple IP pools to a VPN Profile, the name "Auto...
Hello,I am doing a lab with a Windows host that runs VMWare WorkStation and has 3 Linux hosts as VMs. I have configured the switchport on the Cisco device that I am using (C112X) as the following:Note that MAB is enabled for 1 of the VMs that is not ...
Hello,I am doing a little lab with SSH over Public Key authentication, using a Linux host (Centos Stream 10) and a Cisco router (C112X-8PLTEPW). I have successfully generated the key-pair on the Linux host, then manually copy it and paste it on the C...
Buen dia comunidad!!Tengo una pregunta, estoy por implementar secure access para un cliente pero en el KO con el cliente comentan que se van a crear tunels IPsec en cada branch hacia secure access, el tema que este cliente tiene cerca de 200 branches...
