Security

Route-based IPsec Does Not Fail Over

We have configured route-based IPsec as follows.The tunnel address for the routers in the redundant configuration is set to the HSRP VIP on the LAN side.Under normal conditions, the tunnel interface between Router-1 and Router-3 is up, while the tunn...

ASA- Why Dynamic NAT & PAT are unidirectional

I’m a bit confused about Dynamic NAT and PAT on Cisco ASA.When I configure Dynamic NAT/PAT, an inside host initiates a connection to an outside host, and the ASA creates a translation and connection/state entry.My question is: if a new connection/req...

Secure Access Change Log for 2026-08-21 to 2026-08-27

Cisco Secure Access Change LogRelease window: 2026-08-21 to 2026-08-27SummaryDirect download for Docker Resource Connector imagesClearer guidance when CSV export limits are reachedReporting pages support dark modeSecure Access skills in AI CanvasDest...

Online gaming blocking

DNS-O-Matic & Dynamic DNS

So, I've got an email today, as, I suspect, has everyone else - that DNS-O-Matic dies in 30 days.My OpenDNS is tied into DNS-O-Matic.So, no worries, think I - I'll check what options I have - so into OpenDNS, Dashboard, Advanced Settings - and lo, "D...

Starting My Journey from Networking to Cybersecurity

Hi everyone,I’m a student and a girl from a village, and I want to do a lot; I have no help in my area and nearby people.I’m currently building my foundation in networking with the goal of moving into cybersecurity.I’d really appreciate advice from p...

How to check ACL (from object management) logs in FMC?

Hello Cisco Community,I have block rule from ACL in FMC (not ACP), how do I check the deny logs? I saw nothing when I tried to filter by ip source and dest port. I have tested with telnet and the connection refuse as expected, but where to check the ...

Dot1x Machine are getting authenticating with MAB and failing.

Hello Team,greetings.I am seeing a strange behaviour with users, like when first they connect to LAN, laptop is trying to authenticate with MAB and hitting to MAB policy and failing as result "15039 Rejected per authorization profile". we have flow l...

Cisco Secure Client/Umbrella Auto-Update Not Applying

The problem: Even with Auto-Update enabled in the Umbrella global settings, the fleet was not updating on its own. Versions were scattered across 5.1.13 through 5.1.17 for weeks, with the bulk of machines stuck on 5.1.13. Manually updating a couple o...

[NetAcad] Lost MFA access / Need guidance for MFA reset

Hi everyone,I lost access to my authenticator app and I am currently locked out of my Cisco NetAcad account. I do not have backup codes available, and I am unable to reach a local instructor or support directly.Could someone please guide me on how to...

D346 Duo Release Notes for September 3, 2026

Hello everyone! Here are the release notes for our most recent updates to Duo. Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out to commercial deployments. You can su...

Problems resolving cnames for Private Endpoints with Umbrella agent

Hi everyone! We are having some problems resolving Azure private endpoints from Umbrella Agent with both DNS and Web Protection services enabled.The issue relies on the CNAME system that Azure put in place when a private endpoint is created, having t...

ASA loses connectivity to HSRP gateway every ~20 mi fixed by clear arp

Hello community,I am experiencing an intermittent connectivity issue in an environment with Cisco ASA firewalls in failover mode and Nexus 5K switches configured with vPC. I would appreciate any insights or confirmation of possible root cause scenari...