Activity in Security
Integrating On-Prem Cisco WSA S395 with Microsoft Entra ID
Hello,I would like to integrate our on-prem WSA S395 with Entra ID to manage admin logins both on the GUI and via CLI. Unfortunately, I can only find documentation online for the ESA, which refers to the menu item “System Administration > SAML”, but ...
Resolved! VPN spanned over two WAN connections on Cisco ASA?
Hello,I have a quick question for you guys, as I'm not too sure if you can do this. Basically, we are connecting two offices together and need higher bandwidth between the sites over VPN. The main site has a leased line and the remote site has an SDS...
ISE Secondary Node PSN did not take over when Primary failed
We had a situation where the Primary node became "unjoined" to the domain. This caused a widespread VPN connectivity outage because ISE couldn't verify credentials because it couldn't talk to Active Directory.Active Directory still had the machine ac...
Resolved! ISE Certificate
Greetings everyone, i just want to make sure. Is it possible if Cisco ISE work with 2 same certificates but had difference expiration date ? because this 2 certificates will expired in a short time. And so, if it possible for 2 same certificates work...
FQDN Blocked
Using DNS server of 208.67.222.222 and 208.67.220.220.387112-VEPSYS-production-nlb-7c7fd3e3d0a74d02.elb.us-gov-west-1.amazonaws.comand387112-VEPSYS-test-nlb-ebaf5cb861aecd7f.elb.us-gov-west-1.amazonaws.comAre resolving to 146.112.61.109 which is not ...
Difference between Cisco ISE Azure application vs Cisco ISE Azure VM
Hi everyone,Do you know what is the actual difference between Cisco ISE Azure application and Cisco ISE Azure VM?. Another question, when I use VMware or Hyper-V, once the ISE VM is configured you cannot increase the disk size of the VM. I was readin...
Linux DuoConnect v2.0.7 issue on Red Hat 8
Tried to update DuoConnect 2.0.4 to the latest 2.0.7 and get the following error: duoconnect: /lib64/libc.so.6: version `GLIBC_2.34' not found (required by duoconnect).
secure LDAP not working via ISE DACL
I am finding ISE DACL doesn't work with secure LDAP on TCP 636. Previously, we allowed traffic to unsecure LDAP on TCP 389, and DACL works fine. Any suggestions?
Aruba ClearPass on Cisco ASA Remote Access VPN
I was looking for any documentation related to Configuring Remote Access VPN on Cisco ASA with Aruba ClearPass as NAC. Thank you.
Unlocking Universal ZTNA: The Next Step in Cisco Zero Trust Adoption
The Unlocking Universal ZTNA webinar series covers Zero Trust principles, Cisco ISE for workplace security, and Duo for workforce security, emphasising identity, segmentation, and compliance. It contrasts VPN and ZTNA, introduces Universal ZTNA com...
Process Exclusion vs Path Exclusion — What is the correct choice
Hi,I’m dealing with a recurring false-positive event related to one of our internal service executables, and I’d like to clarify which exclusion type is considered best practice according to Cisco Secure Endpoint’s engine behavior.We have an interna...
Resolved! CD-FMC Cloud Management
Good Day All, Hoping you can help me here. I am looking to obtain Cisco CD-FMC for 4 FTDvs positioned in AWS. Their respective SKUs have been relatively easy to obtain. However, looking at the CD-FMC Sku, I am using the : FWM-SEC-SUB Inside this, the...
Cisco FMC MariaDB undo files has reached 1.39GB.
Hello! We recently upgraded our FMC code from 7.4.2 to 7.4.3 and when it finished installing the new software we started getting this message saying: "The size of MariaDB undo files has reached 1.39GB, and it exceeds the threshold of 1 GB. Contact TA...
Resolved! Creating a backup VM of current Firepower Managment center
Hello, everyonei am looking to create a backup of my current Cisco Firepower Management Center for VMware, Version 6.5.0.4 VMWare ESXI 7.0.0 (Build 16324942)OS is Cisco Fire Linux OS version 6.5.0The current server the VM sits on needs maintenance do...
Can ISE change a port description?
Hi Is it possible for ISE to rename a port after a device has successfully finished a dot1x authentication? I'd like to be able to pull the hostname of the device and put it on the port description and then have it change back to a generic port des...
| User | Helpful Count |
|---|---|
| 64 | |
| 25 | |
| 21 | |
| 17 | |
| 16 |
