Activity in Security
ISE 3.4 Not joining Domain
I have a new install of ISE 3.4 Patch 5. When trying to join the local domain we keep getting Error 5 Access Denied. When running the debug wizard i am seeing the 40074 LW Error_not_joined. Wen I run the troubleshooting the Kerberos SASL connectivi...
MacOS with Do1x
Dears i`m have customer use Do1x (witless) user + Machine Auth using (TEAP (Mschap for user , TLS for machine )) << for windows (no posture no cisco any connect )now he need to apply cisco ise for 8- 10 laptops (wireless) with Mac OS like the Windo...
IPsec Anti-Replay Errors on ISR 4451 Across Multiple ISPs
Good afternoon,We are experiencing massive and persistent anti-replay errors:%IPSEC-3-REPLAY_ERROR: IPSec SA receives anti-replay error, DP Handle 11, src_addr 192.168.46.5, dest_addr 192.168.46.3, SPI 0x96ddd296 QFP:0.0 Thread:002 TS:000236450936231...
Need to Configure Alternate SMTP Route when Default Route Fails
Hello,I need to configure an Alternate SMTP Route for All SMTP traffic outbound when the Default SMTP Route fails.I currently have multiple static SMTP routes configured for specified domains, while I use the default SMTP route for all other outbound...
wildcard block on either SME/ESA
Can we implement a wildcard block on either SME/ESA or Umbrella, for all sender address originating from @weal0* and @ibkr0*
Disconnects with AnyConnect MC 5.1.7093.0 to ASA5508/9.16(4)85
I have several Win11 (Pro 23H2 Build 22631.6199/Pro 10.0.26200 Build 26200) clients that experience disconnects with Anyconnect Mobile Client 5.1.7093.0 to an ASA5508 with 9.16(4)85. The pircture is not yet clear, the connctions worked before. It's u...
Resolved! DHCP Snooping & ISE ?
is it true that Cisco ISE has issues with DHCP Snooping configured on the Cisco switch?should there be no DHCP Snooping at all?or is there a way to make them work together without running into problems?
Download VPN Client from FTD
I have configured RAVPN and I am trying to access the outside of the firewall to download the VPN client. I put in the url setup to access to outside interface of the firewall but can't get any reply. I am pretty sure I have everthing configured as r...
ISE 3.2 MnT API – AuthStatus and Session History Always Empty
Hi community,We are working on a Python-based automation script that checks whether a network device (switch/WLC) scheduled for deletion has had any clients connected to it in the last 14 days. The goal is to prevent accidental deletion of active or ...
Announcing: Cisco Secure Access Skills in AI Canvas in Cloud Control
Feature OverviewWe are thrilled to announce that Cisco Secure Access skills are now available in AI Canvas, the collaborative agentic workspace within Cisco Cloud Control! This release, available to US tenants, brings a broad set of Secure Access cap...
Miscategorized domain: the-race.com
Hello,I would like to report a miscategorized domain: the-race.com shows up incorrectly categorized as "Games", despite it being a motorsport news site. Other similar websites such as autosport.com and motorsport.com do not have the same issue.Is it ...
AnyConnect MFA using Microsoft Entra
Hi Guys,I was able to set up MFA for AnyConnect using Microsoft Entra ID. However, I encountered an issue in a multi-tunnel environment.Entra ID requires a unique application configuration for each tunnel. So, if you have multiple tunnels such as Spl...
Resolved! Any need to update ADMX and ADML files?
As outlined in the Duo documentation (https://duo.com/docs/winlogon-gpo), we are using two GPOs when deploying Duo Authentication for Windows Logon. One GPO controls the client settings and the other installs the application on company devices. That ...
Resolved! Cisco ISE 3.3 snmp confi requires remote EngineID
Hi,I am trying to add snmp config on my Cisco ISE 3.3. i have configured below commands#snmp-server enable#snmp-server contact XXX#snmp-server user XXX.... while i try to add snmp host in version3, it requires remote engine ID. And as per my snmp te...
Resolved! Adding Security Intelligence feed to FTD/FDM (No FMC)
I have 1 FPR 1010 that is not managed by FMC (all my others are) I have added custom security intelligence feeds to FMC without issue. I can't seem to find a way to do it in FDM. it seems you can only add network objects, not network feeds. every ins...
| User | Helpful Count |
|---|---|
| 36 | |
| 15 | |
| 12 | |
| 11 | |
| 11 |
