Security

what is difference between svti and DVTI?

Sending cisco FMC logs to a syslog SIEM server.

Hello,I'm new to CISCO and networking too, my field is Infromational Security and I work with security tools.But I have a need to connect FMC vpn connections logs to the SIEM.So I'm trying to make it send logs in ASA formatting because the default sy...

Cisco ISE for beginners

Hey guys, I'm having some real trouble with Cisco ISE. I've been reading books like CCNP CISE 300-175, Cisco ISE for BOYD etc.. I've watched some video lectures about device admin and dot1x those looks easy initially. I'm okay with the configuration ...

YouTube.com bot warning message for Secure Access SWG

Update, May 1st 2025: We are receiving reports from customers still experiencing this issue. We are investigating and will post updates here. We are currently investigating an issue affecting YouTube.com, where users are encountering a prompt to "Si...

Open DNS SSO Failure

Hello, We have an employee that had an account set up in OpenDNS before it was purchased by Cisco but never used to log in. Now when the employee tried to use SSO to log in to Umbrella, it points back to the old instance Open DNS, and we cannot get t...

Guidance on resizing Cisco ISE 3.x nodes to smaller supported Azure VM

We are running a Cisco ISE deployment on Microsoft Azure in a non-production/lab environment. The nodes are significantly over-provisioned (average CPU utilization is consistently below ~2% over a 30-day window). We want to downsize the VMs to smalle...

MacOS EAP-TLS Authentication Fails with Client Rejected ISE Local Cert

Hi All,I am facing an issue with 802.1X authentication in the following environment:Wireless Access Point: Meraki APRADIUS Server: Cisco ISEAuthentication Method: 802.1X (EAP-TLS)We have both Windows and macOS endpoints.For macOS, we deployed the Roo...

Announcement: Network Tunnel Group Usage is now Generally Available

We are pleased to announce that Network Tunnel Group Usage is now generally available in Cisco Secure Access. Administrators responsible for network tunnel groups need to understand which groups are carrying the most traffic, how inbound and outbound...

Announcement: GA Release of Client Endpoint Diagnostic Tool

We are pleased to announce that the Cisco Endpoint Diagnostic Tool is now generally available for Windows and macOS endpoints. When an endpoint experiences an enrollment, connectivity, policy, or web-access issue, gathering the right evidence can req...

Announcement: Service Analytics is now Generally Available

We are pleased to announce that Service Analytics is now generally available in Cisco Secure Access. Administrators responsible for remote-access services need to understand whether users are connecting successfully, where demand is concentrated, whe...

D344 Duo Release Notes for July 17, 2026

Hello everyone! Here are the release notes for our most recent updates to Duo. Public release notes are published on the Customer Community every other Friday, the day after the D-release is completely rolled out to commercial deployments. You can su...

Process Exclusion for Qualys SwCAscanner.exe Not Working?

Hello. I'm noticing that a process exclusion for the Qualys Software Composition Analysis tool doesn't seem to be working correctly. Files that the EXE creates are being flagged by Cisco SE/AMP. Perhaps I've not entered the path correctly? I really d...

Firewall Migration Manager (FMM): Accelerating Firewall Migration

Firewall Migration Manager (FMM) by Cisco is now generally available, a purpose-built, enterprise-grade platform designed to automate, govern, and accelerate the migration of Cisco ASA configurations to Cisco Secure Firewall Threat Defense (FTD). Ava...

Dot1x on Thin Clients Using WYSE Manager

Hello All, My organization is trying to roll out dot1x auth for our thin clients that use WMS for management. We have stood up an NDES server for SCEP so the clients can auto enroll for certificates, and the machines in our test group are getting cer...