Activity in Security
Cisco ISE 3.4 server rolled sshd public keypair after patching
Hi Bergians,We patched a dual-node customer deployment last night from 3.4 Patch 6 to Patch 7 and immediately after the nodes rebooted (and showed patch successful), the public key (and associated server fingerprint) had been rolled, generating warni...
yourplanmatch.xfinityretail.info is marked as phishing site
Hi Team, request to allowlist https://yourplanmatch.xfinityretail.info/ as its flagging as phishing
Major issues after Cisco ESA Upgrade to 16.5.0-780
Just a heads up in case it saves someone else from a bad day. We upgraded to this release due to the SQL injection exploit and now are having major issues: -Much slower mail performance (connect times are 3 times slower across all of our ESA's) -Clus...
Cisco ISE Vulnerability CVE-2026-76460
Hello,A question of interpretation with this new Advisory.A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.This vulnerability is due to insufficient authenticat...
Resolved! Talos Connectivity Problem
Hi to all ,i am getting many messages as the following:Severity: criticalModule: Talos CommunicationDescription: 3 modules failed:* URLDB- Failed to retrieve beaker inventory* LSP- Failed to retrieve beaker inventoryMy subscription is active (it expi...
ORA‑03135 errors after VLAN segmentation on Cisco Secure Firewall 1210
Hello everyone,I’m working with a Cisco Secure Firewall 1210CE Threat Defense running software version 7.6.4-69, protecting a small LAN.To improve security, I segmented the network into two VLANs:VLAN1 – 192.168.0.0/24: Oracle Database Server 19c on ...
Silent uninstall of Cisco Secure Endpoint via Intune
Hi,We have around 60 Windows devices where Cisco Secure Endpoint is stuck on an older version or fails to upgrade to 8.6.2.We want to remove the existing connector remotely with Intune and then let our normal 8.6.2 deployment install it again.We have...
Cisco Secure Client with Azure SAML and Identity Policy
Hi All,I am in the middle of setting up Secure Client VPN with our FTDs using Microsoft Azure SAML authentication. This is all working ok. I am now looking to configure our ACP to filter traffic based on RAVPN SAML user identity. I have set this up b...
Resolved! Asymmetric Routing with Firewalls in HA
Recently, an interviewer asks me about Active/Standby HA. His question was what'll happen if the tcp ack get's back from the standby firewall, considering the configuration is stateful which means state tables were shared between both.In my opinion t...
Remote Access VPN on Cisco Secure Firewall 1220
Hello everyone,I would like to share our Remote Access VPN configuration and an unusual issue we are facing. Perhaps someone has experienced a similar case and can share their experience or troubleshooting steps.Our Configuration:Firewall: Cisco Secu...
Uninstall the old connector
Hi,I'm trying to install Cisco Secure Endpoint 8.4 version however I get message that "Upgrading from Secure Endpoint connector versions prior to 6.3.1 is not supported. Uninstall the old connector then install the new version."All related folders in...
Deploying Cisco Secure Client on macOS via MDM/EMM
Deploying Cisco Secure Client on macOS via MDM/EMM Using the Headend Deployment PackageOverview When deploying Cisco Secure Client on Windows via MDM/EMM, administrators use the Pre-Deployment Package — it contains the individual MSI files that MDM p...
ISE Posturing requiring endpoint to have system password
Hi,We are doing posturing on ISE for Secure Access VPN users. Want to configure ISE posturing, requiring the endpoint to have system password. As I've check there is no built-in options on ISE. What are the configuration options available. Any inputs...
Timing of the “clear crypto sa” Command During a Failure
In a policy-based IPsec redundant configuration, if Router 1 fails, an IPsec SA inconsistency occurs between Router 2 and the remote VPN device, preventing communication from resuming. Therefore, we have automated the execution of the clear command v...
Unable to establish communication with route-based IPsec
For our IPsec connection, our site uses policy-based IPsec, while the remote site uses route-based IPsec.When I changed our site from policy-based to route-based, the router’s tunnel interface went up and the connection was encrypted, but the count o...
| User | Helpful Count |
|---|---|
| 41 | |
| 27 | |
| 18 | |
| 9 | |
| 7 |
