Security

Windows 11 ISE posture

I configured posture policy which use (windows 10(all)) as operating system criteria. and all posture conditions using windows 10 also. but windows 11 PCs still be scanned for posture. Note : posture requirements still in audit state. Can someone exp...

Action Required for Cisco Secure Client Zero Trust Access (ZTA) Agent

Potential Service Interruption Affecting Versions 5.1.9 - 5.1.12 This is a communication regarding a critical issue that may affect your Cisco Secure Client Zero Trust Access (ZTA) deployment. We are reaching out to inform you of a necessary action ...

ISE API - Endpoint Attributes

Hello,I've been poking around at the various ISE APIs including exporting endpoints via context visibility (CSV file exports) and not finding a way to export the endpoint WITH the inactivity days attribute. We have devices that the users may not tel...

Resolved! ISE Patch Question

I have a 4 node deployment - I plan on patching the via CLI and start with the PAN first - PSN Second and the Sec PAN third, but when the below question is presented do I need to say no in order to continue patching the remaining nodes individually?...

ISE 3.2 P7–Context Visibility reset impact

Hi all,We are running Cisco ISE 3.2 Patch 7 (6 nodes, no dedicated MNT).We’re seeing an issue where not all endpoints imported via API from an external identity source are showing up in Context Visibility.Cisco documentation suggests resetting and re...

Reminder: Duo CA bundle update; action required by February 2, 2026!

This is a reminder that Duo’s existing CA bundle will expire on April 15, 2026 due to the the Mozilla CA distrust policy. This expiration will affect all Duo products that use certificate pinning. This service change affects all Duo customers and d...

Clarification on DELETE behavior in Duo Automatic Provisioning.

In Duo Automated Provisioning using SCIM, I’m observing the following behaviour and would like to confirm if this is expected:When a user is first removed from a SCIM-provisioned group and then deleted from Duo, no outbound SCIM DELETE request is sen...

Send RAVPN syslogs FMC managed FTD

HI All,First of all, apologies in advance if this is an obvious question, however, I'm a bit confused how to configure syslogs for FMC managed FTDs.FMC is 7.6.2.1 and FTDs are mixture of 7.6.1.1 and 7.4.3, but in this specific case FTD2k running 7.4....

Port-channel between FTD and ASR 920

We are having issues establishing a port-channel between an FTD 3110 and ASR 920. FTD LACP mode is set to "Active" while the ASR is set to "Passive". But it doesn't work.However, we have seen the FTD 4110 with an LACP mode of "On" and ASR "Passive" w...

Cisco Secure Client - Downloader notification/Popup disable?

We have moved portions of our machines to CSC 5.1.5.65 which is the last update needed in order for auto-updates to work. The issue I am experiencing is that when CSC updates it pops up a notification window that does not go away until it finishes d...