Secure Access

Updated egress IPv6 ranges for web proxy

In the coming weeks Cisco will be changing the egress IPv6 ranges used by the Secure Access web proxy. Today there is a /64 subnet published for each data center (see https://docs.sse.cisco.com/sse-user-guide/docs/secure-access-nat-as-a-service#ipv6...

Cisco Secure Client 5.1.10.233 (MR 10)

Cisco is proud to release Cisco Secure Client (formerly AnyConnect) version 5.1.10.233 (MR10) Download There are three ways to access the Cisco Secure Client: Download from the Cisco Secure Access dashboard Connect > End User...

Secure Access Resource Repository

This repository is a collection of documents, guides, videos, etc. that will help you optimize your network with Cisco Secure Access. This guide is organized by the following stages: Get started, Working with Cisco Secure Access, Custom rules and po...

Welcome to Secure Access Software Release Notes!

Welcome to the new home for Secure Access software release notes. Secure Access is delivered from the cloud, but there are some optional software components such as Secure Client and Resource Connector. Release notes for those components will always...

Multi-Hop BGP capability for Cisco Secure Access

We are excited to announce the addition of the Multi-Hop BGP feature to Cisco Secure Access, enhancing its capabilities for dynamic routing and interoperability. This new feature empowers customers with greater flexibility and control over connectiv...

Contextual Conversational Support for AI Assistant

Feature Overview Contextual Conversational Support for AI Assistant is a new enhancement that enables administrators to maintain context within a conversation thread in the AI Assistant. This feature allows follow-up prompts to be understood in the ...

Support for Network and Service Objects in Secure Internet Access

Feature Overview We are excited to announce the general availability of Network and Service objects in Secure Internet Access unified policy. With the introduction of objects as a policy construct, Secure Access customers can now create policies usin...

New for Experience Insights: AI, OAuth, Auto-Registration and more

DEM AI-Powered Troubleshooting Feature Overview:The AI assistant now utilizes Experience Insights data, encompassing endpoint metrics such as CPU, memory, and WiFi performance, as well as cloud connectivity metrics like latency, jitter, and packet ...

GA Release of ZTA for specific internet destinations

The ZTA for Specific Internet Destinations feature allows administrators to leverage the Zero Trust Access (ZTA) client to securely access the internet with enforcement controls provided by Secure Internet Access (SIA). These controls include Secure...

About Determining the Destination Region for Secure Access

Thank you for your help.Please check the technical specifications of Cisco Secure Access. How does Secure Client (AnyConnect VPN) determine which region Secure Access is connected to? When you assign multiple IP pools to a VPN Profile, the name "Auto...

Multiple VMs and IEEE 802.1X multi-auth host-mode

Hello,I am doing a lab with a Windows host that runs VMWare WorkStation and has 3 Linux hosts as VMs. I have configured the switchport on the Cisco device that I am using (C112X) as the following:Note that MAB is enabled for 1 of the VMs that is not ...

Dynamically import Public Keys from a Linux host to a Cisco router

Hello,I am doing a little lab with SSH over Public Key authentication, using a Linux host (Centos Stream 10) and a Cisco router (C112X-8PLTEPW). I have successfully generated the key-pair on the Linux host, then manually copy it and paste it on the C...

Limite de tuneles en cisconsecure acsess

Buen dia comunidad!!Tengo una pregunta, estoy por implementar secure access para un cliente pero en el KO con el cliente comentan que se van a crear tunels IPsec en cada branch hacia secure access, el tema que este cliente tiene cerca de 200 branches...

Announcement: GA Release of Warn Page Input Field

Feature Overview Secure Access includes the ability to present the user with a Warn notification page which alerts users when they attempt to access a site that violates organizational policies. User must acknowledge the warning before proceeding. T...

Expanded egress IP range for non-web traffic

The egress IP range used for non-web traffic has been expanded. This affects internet traffic (except TCP port 80/443 traffic) from certain data centers. Previous egress IP range for non-web traffic: 151.186.192.0/20 Expanded egress IP ranges for n...