Activity in Security
VPN: Authentication Failed
Has anyone who are using Secure access, experience "Authentication Failed" upon logging in to Anyconnect VPN? The IDP I'm using is Entra ID and followed all the steps based on cisco secure access help documents. Upon checking to the logs in Entra, it...
ISE Posture and delayed start services
Hi guys,We are busy implementing AnyConnect with the ISE posture module. One of the requirements for posture is to ensure the SMS Agent Host services is running. Howerver, I found that this service is set to delayed start, and especially when PCs are...
Cisco FTD Duplicate IP issue on Windows (Proxy ARP, Windows DAD)
Hello community,I recently ran into a very frustrating "Duplicate IP" issue involving the LINA engine, Proxy ARP, and DAD (Duplicate Address Detection). I managed to fix it in Production, but I cannot replicate the root cause in my Lab environment de...
Looking for a genuine factory-default Cisco FTD configuration .
Hi everyone,I'm developing a firewall configuration-audit/parser tool and I'm looking for a genuine factory-default Cisco Firepower Threat Defense (FTD) configuration for testing.I'm particularly interested in:- FPR-2110- FPR-2120- FPR-2130- FPR-2140...
CWA certification for Extreme WLC through ISE.
Hello.I am trying to register Extreme WLC with NAD through ISE and obtain CWA certification.To register the Extreme WLC as a NAD, I need to create a separate Network Device Profile, and I would like to know what aspects I need to check in relation to...
dot1x switch to MAB
I configure 2 radius on the switch and when 1st radius dead then the client will authenticate to 2nd radius but this request use MAB and not dot1x. In my mind maybe the switch have short dot1.x timer so the authentication will switch to MAB even radi...
Resolved! Testing local username
Hello,We have configured AAA authentication on our routers with RADIUS server authentication. As a backup option a local user and enable secret password has been configured.So far RADIUS server is working fine so there was case to test the locally c...
Duo Desktop - Startup times
Hello, We have noticed Duo Desktop takes a long time to load at Windows startup. Assuming this is because it loads in the user (startup) context, which is the lowest priority. If people launch their browsers before Duo Desktop loads, they have issues...
ISE - account password update failed - after upgrading to Windows 2025
I have ISE 3.2 patch 10, and it generates below alarm every few minutes after our Domain Controllers were upgraded to Windows Server 2025. "ISE account password update failed - ISE server has failed to update its AD machine account password"This is d...
Failure to recover during an IPsec switchover
Traffic from Server-1 to Server-3 is encrypted using a policy-based IPsec tunnel between Router-1 and Router-3.Router-1 and Router-2 are configured in a redundant setup and share the same VPN endpoint address.The system is configured so that when Rou...
Site-To-Site VPN between Meraki MX and FTD Managed by FMC
Hi there, has anyone had any success setting up a site-to-site VPN between a Cisco FTD being managed by FMC and a Meraki MX device? For the life of me, I can't figure out how to get it to work. The configuration on both seems to match, but I'm unable...
Upgrading ASA 5506-x
Hello,Having a problem while trying to upgrade an asa 5506-x.This is a factory reset device currently running 9.5.1 and trying to get to 9.16.4.25.I can get there, but after a reboot the boot image is gone and I have to manually add it and wr mem.wen...
What security setup would you recommend for a small local service site
Hi everyone,I’m working with small local service businesses that use WordPress websites, and I’m trying to better understand what a sensible security setup looks like when the business doesn’t have a dedicated IT or security team.A typical site might...
FirePOWER not blocking TOR even with enabled security intelligence
I have Cisco ASA5525-X Threat Defense and i cannot block tor networks. I have configured Security Intelligence to black list tor-exit-node but no luck. Any suggestions?
Resolved! Can we do ISE Profiling Manullay with Essential license only
Hellois it possible to do manual profiling with Essential licesne only. i want to do it for MAB devices and i am manually importing the MAC addresses in bulk. i just want that Vendor or Device type should be visible under endpoint Radius logs (Axis/C...
| User | Helpful Count |
|---|---|
| 36 | |
| 11 | |
| 11 | |
| 10 | |
| 9 |
