Security Knowledge Base

With Windows 10 build 2004 and ISE 2.7 Patch 2 TEAP (EAP Chaining) is now supported. It seems currently TEAP can only be configured manually for non-domain joined workstations. This is due to the TEAP option not available under the group policy confi...

IntroductionPre-requisitesComponents usedDuo background informationDuo Authentication ProxyDuo Access GatewayDuo CloudIntegration Scenarios1) ISE RADIUS Proxy and Duo Authentication Proxy2) Duo Authentication Proxy and ISE Primary Authentication Sou...

Introduction Cisco Secure Client the rebranded AnyConnect Client is best known as a VPN client but has been much more than that for a long time.   CSC is an enabler of Security services with its many modules;  NVM, NAM, Umbrella, ISE Posture, Secure...

The Cisco Vulnerability Management platform is a risk-based vulnerability management (RBVM) solution that at its core, provides organization with proven threat intelligence and prioritization for vulnerabilities within their environment. It also has...

  FMC complains about an FTD with High Unmanaged Disk Usage. In this instance the /ngfw was consuming 100% of its allocated disk space causing it to lose connectivity to the FMC as well as the device was unreachable on SSH. Associated with bug ID...

Understanding the FQDN ACL FeatureBasic ConfigurationStep 1: Define DNS serverStep 2: Create the FQDN object for the host name in questionStep 3: Add the FQDN Oject to an ACLVerify the ACL with FQDNsBest PracticesUse a trusted DNS serverIncrease the ...

As described in this article, the Vulnerability Exploitability eXchange (VEX) allows a software supplier or other parties to assert the status of specific vulnerabilities in a particular product. VEX serves as a way to convey the condition of a soft...

ISE REST API InformationWhich ISE Node(s) are Used for Guest APIs?Known Caveats with ISE Guest APIEnable ISE REST APIsAccess PermissionsMisc Setup DetailsBulk operationsExamplesFAQ   This guide will list Tips and Tricks around using Guest API calls w...

IntroductionWhat is the Queue Link / Queue Link Error ?Troubleshooting - Queue Link ErrorCause=basic_cancelCause=TimeoutCause=EconnrefusedCause={tls_alert;"handshake failure"}Cause={tls_alert;"unknown Ca"}Generate Signing Requests (CSR)Other CausesEf...

  Cisco ISE Secure Wired Access Prescriptive Deployment Guide   Authors: Hariprasad Holla (until June 2018), Mahesh Nagireddy (until Dec 2018)   For an offline or printed copy of this document, simply choose ⋮ Options > Printer Friendly Page. You ma...

Umbrella's Tenant Controls setting lets you control identity access to software as a service (SaaS) applications in the cloud. When configured, identity access is limited to only those resources approved for your organization. The end result is that ...

Traffic forwards to Umbrella from networks, IPsec tunnels, network devices, and client connectors and forwarders. Umbrella represents a network entity, user, or group as an identity in an Umbrella policy. Umbrella policy settings apply to an identity...

When configuring the Web policy, adding rulesets, ordering them, and then having them protect your organization and systems exactly how you need them takes planning and an understanding of how Umbrella's Web policy and its rulesets work. We strongly...

RADIUS and Symantec VIP.   I will use screenshots of ASDM, and at the end I will add the required CLI commands.  the diagram below show a diagram of the steps the FW goes through when using 2FA authentication: As you can see in Fig. 1 the first ste...

Here is a quick way to enable netflow top talkers to see what traffic is flowing through the router.  This is especially useful during an attack and you want to see what types of traffic and where most of the traffic load is coming from.To enable net...