Activity in Security
Maximum new connections per second Firewall 3100
I need this data, Maximum new connections per second without AVC (only Firewall layer 3/4), to Firewall 3110 - FTD.
cdFMC and Identity mapping from Microsoft Entra ID
Hi All,Hope someone is able to point me at the right online resource.We in our org have FTD's deployed and managed from cdFMC and more and more requests are arriving for identity based access rules to be implemented. We currently do not use Identity ...
Cisco Firepower Syslog 430002 & 430003
Hey friends, so I am currently struggling to find the correct solution for our firewall syslog forwarding situation from our FMC resp. our FTDs.We have an Elastic system where we are currently sending our firewall logs to. We send the syslog IDs 4300...
Resolved! CCL Link in a 2 member cluster - Failure considerations
Hi, I have a very basic question here however I am not being able to get a clue about it anywhere. We have a 2 x 4100 Firepower device cluster which has a 4x10G CCL link between the two appliances connected via 2 intermediate switches as per CISCO´s ...
Secure Client - Debian Posture Module
Three Articles caught my attention before testing Posture with Debian 12 (code-name Bookworm) ... 1. the Release Notes for Cisco Secure Client, Release 5.1: Web Deployment for DEB (Debian) installation is not currently supported.Modules provided wit...
OSPF reconvergence timer on FTD in HA
Hi all, Does someone knows how to influence OSPF reconvergence timer on FTD in HA setup? I am facing failover scenario where stale route is still visible in routing table for about 70 seconds which is also visible in output from command: show route f...
Whitelisting NordVPN
Hello,I am using OpenDNS at my residence to provide a safe networking solution for my family, I have three young children that access online resources. I also work from home frequently and require services that are currently being restricted in paral...
Cat 8500/8300 RFC 9370 PQC Support without SKIP/PPK?
Hi everyone,I am looking for official clarification regarding native Post-Quantum Cryptography (PQC) capabilities on the Cisco Catalyst 8000 series platforms.We are currently running a setup with the following hardware and software components:- Hub: ...
Provisioning of Intenal DB ISE Users
Does secure access supports provisioning internal DB users of ISE for third party users use case in secure access? Is there any supporting documentation for that?
Microsoft RRAS - Yubikey implementation?
Hi everyone,Has anyone implemented a YubiKey as an authentication method for Microsoft RRAS?If so, which YubiKey model did you use?I've done a bit of reading on it already, but I'd like to confirm that it's a supported and practical solution before m...
Duo Identity Provider Integration with ISE
Is there a way to retrieve the Duo users/groups (duo is not integrated to any IDP such entra or AD, just a created duo users) into ISE for SGTs? I've already done the Entra integration, and I'm wondering if it's also possible to sync or retrieve grou...
ISE service to be restarted with DNS/NTP modifications
I have issues with the way how Cisco designed the ISE service to be restarted every you time you make changes to the DNS and/or NTP configuration. The underlying system is based off Redhat Linux, so what actually changes is under /etc/resolv.conf fo...
Resolved! Cisco ISE 3.1 – Clarification on OR Logic in Posture Policy
Dear Cisco TAC Team,We are currently configuring Cisco ISE 3.1 Posture Policies and require clarification regarding the posture policy logic.Our requirement is to mark an endpoint as Compliant if either of the following endpoint security application...
Claim Your Cisco Secure Access Subscription in SCC
Claim Your Cisco Secure Access Subscription in SCCUse this guide to select the correct Cisco Security Cloud Control (SCC) organization and activate your Cisco Secure Access subscription using the right deployment path.Claiming Cisco Secure Access in ...
Resolved! Cisco ISE TACACS+ to Fortigate Read/ Write and Read Only configuration
Hello,I am working on some Fortinet's and for anyone that has connected Fortinet's to Cisco ISE using tacacs+ I could really do with some help.TACACS+ > Active Directory > Separate Read Only group and Read/Write GroupArticle that I am using to config...
| User | Helpful Count |
|---|---|
| 127 | |
| 23 | |
| 11 | |
| 10 | |
| 10 |
