Security

Explore the security forums and share your expertise about firewalls, email and web security, Identity Service Engine, VPN, AnyConnect, Duo, Umbrella, Secure Access and more.
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Browse the Community

Network Access Control

Cisco Identity Services Engine (ISE), Cisco Access Manager (CAM), Zero Trust Workplace

33640 Posts

Network Security

Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Ada...

71363 Posts

Duo Security

Get started with or get better at administering and using Duo by interacting with peers and experts!

3680 Posts

OpenDNS

Ask questions not covered by support articles and documentation.

3680 Posts

Activity in Security

TEAP - Windows 11 and ISE version 3.4

We are troubleshooting Windows 11 native wired 802.1X using TEAP with EAP-TLS chaining against Cisco ISE 3.4. We are trying to determine whether anyone has successfully implemented the same configuration or has encountered similar Windows supplicant ...

net-guy by • Frequent Visitor
  • 1101 Views
  • 23 replies
  • 0 Helpful votes

Two VPN Profiles, one for MFA, a second hidden non-MFA for break glass

I need to create 2 VPN Profiles. 1) Legacy non-MFA, 2) MFA. Admin machines have both. Users only have only MFA. Need to hide Legacy from Group Profile selection, only accessible from Admin profile. This is to be used if MFA breaks for some reason.Wha...

davparker by • Level 3
  • 112 Views
  • 3 replies
  • 0 Helpful votes

ASA5506 firmware to address AnyConnect CVE-2025-20333

I am in the process of replacing an ASA5506 with a CSF1220CX, however, is there a firmware update available to bridge us to the new device?  We are looking for ASA5506 with FirePOWER Services Release 9.16.4  or 9.14.4.

rbciscocom by • Community Member
  • 112 Views
  • 3 replies
  • 0 Helpful votes

Cisco SIA URL Categorization issue

Hi All, We are having a probelm as Same website is allowed for one user and for the Othere user same website has blocked as Uncategorized. Anyone facing this same kind of issue same website has been categorized properly in Talos. 

Duo Network Gateway 3.4.2 Released 2026-10-27

Here are release notes for Duo software released today. Duo Network Gateway Version 3.4.2Updates the included certificate bundles to explicitly remove root fingerprints now identified as distrusted.Updates libbrotli1 in the syslog container to 1.0.9-...

DuoKristina by • Cisco Employee
  • 149 Views
  • 1 replies
  • 0 Helpful votes

Resolved! issue with security intelligence

 In fmc version 10 i see this critical alert Security Intelligence2 System feeds failedresponse processing failed for Cisco_DNS_Intelligence_Feedresponse processing failed for Sourcefire_Intelligence_Feedi logged in the fmc cli and i can connect to u...

Teofanis by • Visitor
  • 642 Views
  • 6 replies
  • 0 Helpful votes

Resolved! OpenDNS static IP inactive; originid 0 and filtering not applied

Hi Cisco/OpenDNS team,My OpenDNS Home static IPv4 registration became "Inactive" despite dynamic IP updates always being disabled. I re-added it; the dashboard now shows the old inactive entry and a new entry displaying the correct IP. Dynamic update...

Cisco FTD and bug CSCur87061

Has anyone here running FTD software hit the bug CSCur87061? The suggested workaround seems to be to "Block icmp unreachables in interface access-list" using flexconfig in FMC. How disruptive can this implementation be and can this affect the working...

fwg1418 by • Visitor
  • 125 Views
  • 1 replies
  • 0 Helpful votes
Top Experts - Last 30 Days