Activity in Security
another Duo Authenication Proxy HA AD question
We have one Auth Proxy set up that points to one domain controller and also is set up for SSO. I want to set up another Auth Proxy. Can I have it point to another DC for the same domain (we just have one AD domain)or does it have to be the same one ...
Replacing Phone with Cisco Duo - How Can I Transfer MFA Without Losing
Hello,I need to replace the mobile phone currently used for Cisco Duo MFA authentication on my Cisco account.I reviewed Cisco document ID 220594, but the documented procedure requires opening a case associated with a Security Cloud Sign-On contract, ...
Cisco ASA 5508-X with FirePOWER fails to deploy policy
This started suddenly, without any configuration changes on our end. I've noticed that Cisco's recently published SRU packages have dropped significantly in file size (from the usual ~40-50MB down to ~19MB in the last 3 consequent releases, and this ...
IPsec in Redundant Router Configurations
The LAN side is made redundant using HSRP across two routers in a redundant configuration, while the WAN side exchanges routing information via BGP and uses policy-based IPsec.Initially, we proceeded with a design that used the LAN-side HSRP VIP as t...
Announcement: GA release of Advanced Boolean AND Policy Capabilities
Feature OverviewCisco Secure Access now supports advanced Boolean AND logic in policy destination conditions. Security administrators can combine multiple object types—Internet Applications, Application Protocols, Content Categories, Network Objects...
ISE after Upgrade to 3.5 Patch 3 no CLI access
Hello,I've upgraded our Test ISE VM from 3.4 Patch 6 to 3.5 Patch 3 and now I've no more CLI access.same User on GUI is working, TACACS, Radius is working but no CLI Access, not with ssh, not with VM Remote ConsoleAdmin Access on GUI is working with ...
ISE on KVM — sizing for 5-6 year lifespan
Hi all,We're currently running a Small Deployment on 2x SNS-3715 hardware (500–1000 endpoints), which is reaching EoL. Per new internal directive, we're migrating to a KVM virtual environment instead of replacing with new appliances.Per the ISE 3.5 I...
Secure Client VPN Jabber to Jabber & Drop outbound UDP traffic
We have Cisco Secure Client 5x. VPN to an FTD 7.7.11 managed by FMC. VPN works well for all traffic except from VPN Client to VPN Client. Hair pinning is configured. The problem we are facing is that two users on VPN cannot hear audio on a Jabber cal...
On-prem MFA for Cisco AnyConnect via RADIUS
Hi everyone,We're planning to deploy MFA for Cisco AnyConnect VPN and are evaluating different approaches.Our users authenticate against Active Directory, and we'd prefer to keep the solution on-premises rather than relying on another cloud service.F...
DMVPN Phase-3 with IPSec IKEv1
DMVPN Phase-3 with IPSec IKEv1 Introduction Lab Topology DMVPN Phase-3 Configuration IPsec IKEv1 Configuration Verification Introduction The final phase of DMVPN changes th...
CSCwe77576 - intrusion event on the FMC
7.6.5 also affected
Cisco PxGrid with Fortimanager
Dear Team,I hope you are doing well.I am currently working on integrating Cisco ISE with FortiManager using pxGrid, following the FortiManager integration guide.According to the documentation, I imported the following certificates into FortiManager:...
GA Release of NTG Inter-Region Failover and DC Selection
We are pleased to announce the General Availability of Inter-Region Failover and Primary/Secondary Data Center Selection for Cisco Secure Access Network Tunnel Groups. These capabilities improve resiliency for Cisco-owned Secure Access regions by all...
GA Release of VeloCloud SD-WAN Support for Network Tunnel Groups
We are pleased to announce the General Availability of VeloCloud SD-WAN support for Network Tunnel Groups in Cisco Secure Access. This integration enables VMware VeloCloud SD-WAN edges to connect natively to Cisco Secure Access through secure IPsec t...
Secure Access Change Log for 2026-07-03 to 2026-07-09
Cisco Secure Access Change LogRelease window: 2026-07-03 to 2026-07-09SummaryNetwork Tunnel Group routing-type filtersUpdated Events filter-card statesGoogle AI support in Advanced Application ControlsThree-way Boolean AND policy conditionsMCP read o...
| User | Helpful Count |
|---|---|
| 153 | |
| 21 | |
| 14 | |
| 11 | |
| 11 |
