Activity in Security
Cisco Secure Endpoint MacOs - Exclusions
Hi,What exclusions would you recommend for Cisco Secure Endpoint? At the moment, I’m using Cisco’s recommended exclusions. Based on your experience, does anyone have any additional exclusions they would suggest? Regards,
Switchport Configuration for dot1x MAB
Hi,There is only a single VLAN configured on the switch, we configure switchport access vlan 100 on the switch ports that connect to devices which support dot1x. For the devices which don't support dot1x, we configure MAB on the switch port without s...
FMC 7.6.5 remote backup failing
Hi,We have 5 FMC servers which have been upgraded recently from 7.4.2 to 7.6.5. I found out that since then the daily backup of the FMC server towards a Linux server (Ubuntu 20.04) is not working anymore. The firewalls are still running on version 7....
Resolved! Disable 802.1x in the estate
Hi ,I was asked to disable 802.1X for a few specific ports, and all I had to do was under the switchport: remove access-session port control-auto command.But recently, there was an incident across the entire branch where users were not authenticated ...
Major issues after Cisco ESA Upgrade to 16.5.0-780
Just a heads up in case it saves someone else from a bad day. We upgraded to this release due to the SQL injection exploit and now are having major issues: -Much slower mail performance (connect times are 3 times slower across all of our ESA's) -Clus...
Mail Bouncing
Hi Attached Mail log which is bounced need reason and how to allow this email to be whitelisted.RegardsAjay Sharma
Policy for Network Subnets in Secure Access
Hi. Does Cisco Secure Access supports creating a policy for internal networks that associated with network tunnel? For example, the subnet for IOT devices is 192.168.x.x/24 and for guest users is 172.x.x.x/24, and I wanted to create separate policy f...
Dot1x Machine are getting authenticating with MAB and failing.
Hello Team,greetings.I am seeing a strange behaviour with users, like when first they connect to LAN, laptop is trying to authenticate with MAB and hitting to MAB policy and failing as result "15039 Rejected per authorization profile". we have flow l...
ASA TACACS test Authentication Successful but SSH Login Fails After
We replaced a failed Cisco ASA 5515-X with the same model and restored the original configuration. No ohter changes were made.Environment:- ASA Version: 9.12(4)58- Cisco : 3.x- Same hostname, IP address, TACACS servers, shared secret, and AAA configu...
ISE captive portal issue on client
Captive portal is not popping up on client automatically while connecting to guest SSID. But if we open browser enter neverssl.com then it redirects to captive portal and allow us to complete guest registration and sign on process. Also receiving cer...
When Route-Based IPsec SAs Expire
For an IPsec SA established via route-based IPsec, if traffic ceases on the standby router, does the SA get deleted when its lifetime (86,400 seconds) expires?Please let me know if there are any other conditions or timer values that trigger deletion....
Manual Migration of Cisco Umbrella DNS and SWG to Secure access
Hi Folks, We are looking to migrate Umbrella to Secure Access manually instead using upgrade manager tool , are there any issues if we manually test policies with a pilot and start moving the users to Secure AccessWe will prepare a GPO for orginfo /S...
Native connectivity from AWS and Azure to Cisco Secure Access
We are excited to announce the new capability for native connectivity from AWS and Azure environments to Cisco Secure Access, enabling customers to terminate IPsec (site-to-site VPN) tunnels directly using native cloud elements without the need for ...
Duo Gateway Authentication Options
I am running an implementation of Duo on a Virtual Desktop Environment (VDI) that uses the Microsoft Desktop Gateway App to perform 2FA on a broker/session host. I understand there are only two options with this implementation: Duo Push, and Phone Ca...
Poc demostration
I need a poc for demostration proposite, please help me, need a meraki mx75, mr for ap and two switchs, for vlans, one for vlan data and video, other switch for data an control acces, the ap should be in three vlans with diferent ssid, thanks
| User | Helpful Count |
|---|---|
| 44 | |
| 26 | |
| 16 | |
| 10 | |
| 9 |
