Security

Graceful automatic shutdown of FTD

Hello communityRecently, we faced a degraded FTD device in our HA pair during a power outage. Regarding this issue, we decided to implement a graceful automatic shutdown of both FTD devices based on signals from UPS. We already have this solution wor...

Need to download from Ameriprise

Migration Configuration FDT to ASA

DearCan I use any tool to migrate configuration from 2140 FTD to 3110 ASA?regardsMM 

CSCwp21394 - wired nads failing CTS with error

Hi Also upgraded to latest ISE 3.5.0 patch 1. Switchports started failing with Could not parse the cts-pac-opaque attribute also cts data empty show cts environment-dataCTS Environment Data====================Current state = STARTLast status = Failed...

CSCwn85711 - ISE: Memory leak in EPPurgeEventHandler

Anyone else notice this issue with patch 7 of 3.2? Just opened a TAC case because our PSN memory usage has been going up for 2 weeks straight since updating to patch 7 from patch 6. Guessing as a small workaround until more is know maybe I can reboot...

ISE service to be restarted with DNS/NTP modifications

I have issues with the way how Cisco designed the ISE service to be restarted every you time you make changes to the DNS and/or NTP configuration.  The underlying system is based off Redhat Linux, so what actually changes is under /etc/resolv.conf fo...

Duo Identity Provider Integration with ISE

Is there a way to retrieve the Duo users/groups (duo is not integrated to any IDP such entra or AD, just a created duo users) into ISE for SGTs? I've already done the Entra integration, and I'm wondering if it's also possible to sync or retrieve grou...

Best method to upgrade to ISE 3.5 Full or split and why

I am currently on cisco ise version  3.3.0.181 and planning to upgrade to 3.5. I have two nodes a primary and a secondary. What is the best way to prepare for the upgrade and method split or full upgrade. Can you also tell me what gotchas you ran int...

GA Release of Global Routing Table for Cisco Secure Access

We are pleased to announce the General Availability of the Global Routing Table feature in Cisco Secure Access. This centralized routing table provides a comprehensive view of all routes used to direct traffic between users and private resources acro...

cdFMC and Identity mapping from Microsoft Entra ID

Hi All,Hope someone is able to point me at the right online resource.We in our org have FTD's deployed and managed from cdFMC and more and more requests are arriving for identity based access rules to be implemented. We currently do not use Identity ...

Announcement: GA release of DLP End-User Desktop Notification

End-User Desktop Notification for Cisco Secure Access Data Loss Prevention (DLP) is now generally available. This feature extends DLP violation notification capabilities by introducing desktop notifications — delivered directly to the end user's mach...

FMC Fails to load objects

We have 4600 FMC managing two instances on ftd on 4245 Appliance. Lately the fmc is failing to load objcts, eg whe I try to list devices, or policies, it takes time then returns 403 Forbidden page. Am using the admin user. Any assistance is  resolvin...

Announcement: GA Release of Enhanced Private Resources Search

We're excited to announce the general availability of Enhanced Search for Private Resources in Cisco Secure Access. Administrators can now search the Private Resources table by resource name or by complete address values, including IP address, intern...

Rest API question on FMC

All,I am looking for some direction on scripting a RestAPI call to our FMC (7.5). I have been able to figure out how to send the API call via curl and find the Auth Token that I then copy/paste into to GET that then returns my info. However, really c...

Success Capsules | Cisco AI Defense: Application Discovery

This video provides an overview of the integration between Cisco AI Defense and Cisco Secure Access for AI Application Discovery, also known as AI Access. It explains how organizations can gain visibility into employee usage of third-party AI applica...