Cisco IOS-XE Security Configuration Auditor
How secure is your Cisco IOS-XE configuration?A working configuration does not necessarily mean a secure configuration. Cisco IOS-XE / IOS-SE Security Configuration Auditor performs deep static analys...
Blog Articles
Cisco IOS Security Auditor
Why Configuration Security Audits Need to EvolveNetwork infrastructures have grown far beyond simple collections of routers and switches.Today's enterprise networks must defend against increasingly so...
Expediting Cisco ISE Heap Dump Analysis on macOS using Eclipse MAT
Table of Contents Collecting a Heap Dump on Cisco ISE Overview Prerequisites Use Case 1: Resolving Memory and Parsing Errors Use Case 2: Troublesh...
Endpoint Profiling (Beta) in Cisco Access Manager
Profiling has become a critical requirement, but most solutions still rely on traditional methods that struggle to keep up with the explosion of IoT, OT, and unmanaged devices. The result is limited v...
Scaling AI‑Augmented Contribution Through Harness Engineering
At Cisco's AI Software and Platforms group, we stopped treating CI/CD as plumbing and started treating it as a product. Here's how a deliberate investment in "harness engineering" let engineers, PMs, ...
From Rules to Review:How We Built & Open-Sourced an AI-Security Agent
As AI coding agents reshape how software is built, they also reshape how vulnerabilities are introduced. Code is being generated faster than ever, but speed without security is a liability. At Cisco, ...
When AI Finds Faster Than Humans Can Patch: Disclosure Must Evolve
Project Glasswing is an amazing initiative by Anthropic. Cisco is one of the main participants and I have been honored to work on it since it started. This is NOT hype! Claude Mythos has discovered th...
Encrypted Visibility Engine (EVE) on Cisco FMC
Encrypted Visibility Engine (EVE) on Cisco FMC – What I LearnedI recently attended a Cisco webcast on Encrypted Visibility Engine (EVE) and wanted to share some key learnings on how EVE can be enabled...
Cisco ISE Integration with Palo Alto for RADIUS Authentication
This guide outlines the steps to integrate Cisco Identity Services Engine (ISE) with Palo Alto Networks firewalls using the RADIUS protocol. This integration supports two primary use cases:Administrat...
Python Script to Precheck Cisco FTDs over a Jump Server
Hi All,Tried and tested to run pre and post checks for Cisco FTD over Linux Jump servers.Note: you would require 'ftd_prechecks.txt' with the CLI commands saved in the same folder as your code.#######...
Cisco's Framework for AI Security
Organizations are facing a fragmented landscape of risks (from adversarial attacks and supply chain compromise to harmful outputs and governance gaps). Cisco has recently published a few resources tha...
ISE - What we need to know about
This Blog compiles essential information on topics that every Cisco ISE Administrator should know, such as: Context Visibility, TLS, Localized Installation, DNS Server, Support Bundle, Data Connect, L...
ISE - Anomalies - Quick Filter OR vs or
Anomaly identified in Cisco ISE Quick Filter when using OR vs or, which leads to an unexpected result.
ISE - Anomalies - License Type
An anomaly was identified in Cisco ISE Live Sessions when using Quick Filter with License Type = Premier, which leads to an incorrect result.
ISE configuration - memory refresh - EAP authentication
OK ... I need a memory refresh. It has been so long since we originally setup our ISE environment that I have forgotten a lot of things. This is specifically addressed to wireless connections but I al...
