Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Explore the security forums and share your expertise about firewalls, email and web security, Identity Service Engine, VPN, AnyConnect, Duo, Umbrella, Secure Access and more.
Intelligent Decryption Bypass is a feature designed to simplify decryption policies by dynamically offloading low-risk traffic. It utilizes a dual-sided, real-time risk assessment powered by the Encrypted Visibility Engine (EVE) and Cisco Talos Inte...
Elephant flows are defined as large, long-running network connections that pass through the firewall. By default, the system identifies a connection as an elephant flow if it exceeds 1024 MB (1GB) in total size and lasts for more than 10 seconds. Thi...
Hi Cisco/OpenDNS team,We operate Lantern, a B2B inventory-planning platform for distributors. Some customers are seeing certificate warnings and cannot access our service, while it loads normally for most users.Our investigation found a consistent di...
Here are release notes for new Duo Downloadable software released today:Duo for Windows Logon 6.0.0 - September 3, 2026General Availability of Offline Access for Passwordless OS Logon.Adds the Duo WinLogon Support Tool, a graphical diagnostic applica...
In a policy-based IPsec redundant configuration, if Router 1 fails, an IPsec SA inconsistency occurs between Router 2 and the remote VPN device, preventing communication from resuming. Therefore, we have automated the execution of the clear command v...
I need to migrate a Cisco ISE deployment consisting of 1 PAN, 1 SAN, and 3 PSNs, for a total of 5 nodes. The goal is to move all VMs from VMware to Nutanix.My migration plan is to first move the PSNs one by one, verifying that services are operating ...
I have configured RAVPN and I am trying to access the outside of the firewall to download the VPN client. I put in the url setup to access to outside interface of the firewall but can't get any reply. I am pretty sure I have everthing configured as r...
hi,can someone exaplain to me what happens in the negociations when different sa lifetimes are configured between two vpn peers, ( either the ipsec and ike lifetimes are not the same between peers )thanks in advance
Not receiving mail before x days for admin users password expire from iseadminportal@FQDN and we have smtp server in ise but have another mail id but what should i do for receiving mail before password expiration of ise admin users
I am troubleshooting an issue where syslog messages from a firewall do not include the configured hostname or any other device identifier.The affected device is a Cisco Secure Firewall 1220CX running FTD 7.6.2-329.The hostname is configured on the de...
We've got an interesting scenario where a few different times at 3 different locations, we've had entire switch stacks where ports with Cisco Access Manager enabled stop forwarding traffic. Today we were able to determine that when this occurs, its ...
In fmc version 10 i see this critical alert Security Intelligence2 System feeds failedresponse processing failed for Cisco_DNS_Intelligence_Feedresponse processing failed for Sourcefire_Intelligence_Feedi logged in the fmc cli and i can connect to u...
I’m a bit confused about Dynamic NAT and PAT on Cisco ASA.When I configure Dynamic NAT/PAT, an inside host initiates a connection to an outside host, and the ASA creates a translation and connection/state entry.My question is: if a new connection/req...
I am trying to migrate FPR 2100 FTD to FPR 3105 FTD. Both of them are managed by the same FMC. The FPR3105 has only one configured interface: the management interface. When I use the migration from the FMC, it fails after mapping the interface. Any r...
