Activity in Security
palummu.com blocked — legitimate SaaS, Talos tickets auto-closed
Hello Cisco Security Team,Our legitimate business website palummu.com (SaaS) is being blocked at the DNS level — public resolvers (8.8.8.8, 1.1.1.1) return REFUSED for the domain, and Cisco Talos lists it with a "Questionable" web reputation.We have ...
FTD Remote Access VPN SAML w/ 2nd connection using local certificates
Currently have an FTD setup and managed by an FMC with a publicly signed certificate assigned and in use for remote access users with a SAML integration. That is working without any issues. I now wanted to add a 2nd connection method for some mobil...
Creating Radius policy in ISE to add a port dynamically (dynamic vlan)
Hi Experts,Currently all our phones in the estate using default vlan and getting and IP to connect to the network.Phones are coming to its end of support hence new phones being asked to assigned to a dedicated vlan.I am thinking of using dynamic vlan...
ISE Posture - Patch Management
Hi, In ISE deployment, we have a posture condition for patch management, (up to date, check for missing critical patches).The windows update agent version is 1510.xThis is not available on the ISE 3.3.I would like to also confirm if we need to integr...
Cannot enroll Android 9 device with Cisco Duo App 3.62
Hello!We have one of our users who had to temporarily switch his Cisco Duo App to a spare old phone running Android 9 until he purchase a new phone to replace a broken one. He followed procedure to install 3.34 APK then update to 3.62 APK which is la...
User/Admin Directory Sync Configuration
It would be great if we had the ability to manage the Directory Sync configuration from the API. This would allow for us to completely automate a child account setup. We could use the values to write the authentication proxy configuration without any...
Resolved! ISE service to be restarted with DNS/NTP modifications
I have issues with the way how Cisco designed the ISE service to be restarted every you time you make changes to the DNS and/or NTP configuration. The underlying system is based off Redhat Linux, so what actually changes is under /etc/resolv.conf fo...
My Instagram account is locked behind an authenticator-app 2FA code. I originally set up Duo Mobile when I subscribed to Meta Verified. I cancelled Meta Verified and later deleted Duo Mobile. I know my Instagram password and I am the owner of the acc...
CSCws21678 - Zombie processes created by cscan on macOS Tahoe
Just an FYI as this one was hard to find. All of our developers on MacOS Tahoe and the latest version of the Cisco Secure Client have the issue.### Root Cause Analysis of Spindumps 1. **Process Identification**:* The affected process is `cscan`, loc...
Enhanced IP Blocking for Remote Access VPN
Feature Overview Cisco Secure Access now protects Remote Access VPN against automated password-spray attacks through complementary automatic and manual IP-blocking capabilities.Automatic threat detection: Uses the ASA threat-detection service to iden...
Cisco ISE Posture: Support for Unvalidated OS & Beta Releases
1. Feature Overview & Release Notes ReferenceStarting in Cisco Identity Services Engine (ISE) Release 3.3 (and carried forward into ISE 3.4 and ISE 3.5), Cisco introduced the feature:"Enhanced support for unvalidated operating systems releases in pos...
Resolved! FMC Deployment Failed: "Failed to create snapshot: n.a."
Hi Cisco Community Experts,I am encountering a persistent deployment issue on Cisco FMC 7.6.5 when deploying policies to an FPR-2110 FTD managed via a Data Interface (Ethernet1/1, nameif: outside).Deployment fails at the snapshot generation stage wit...
Data interface for manager access with Cisco FTDs in HA
We need to use data interface for manager access with Cisco FTDs in high availability. In our scenario, the FTDs in HA at remote site need to be get registered with FMC in HO. As we don't have dedicated management network, we need to use the Outside ...
GA Release of Global Routing Table for Cisco Secure Access
We are pleased to announce the General Availability of the Global Routing Table feature in Cisco Secure Access. This centralized routing table provides a comprehensive view of all routes used to direct traffic between users and private resources acro...
ISE 3.3 Patc 5- user cannot change password if expire
We're running Cisco ISE version 3.3, patch 5,and we've joined it to our Active Directory domain controller.We ran into an issue where if a user's password expires,they can't change it while connected via 802.1X."Enable Password Change". is already en...
| User | Helpful Count |
|---|---|
| 20 | |
| 14 | |
| 13 | |
| 11 | |
| 10 |
