Security

Explore the security forums and share your expertise about firewalls, email and web security, Identity Service Engine, VPN, AnyConnect, Duo, Umbrella, Secure Access and more.
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel

Browse the Community

Network Access Control

Cisco Access Control Server (ACS), Identity Services Engine (ISE), Zero Trust Workplace

33273 Posts

Network Security

Engage with peers and experts on network security topics such as Secure Firewall Threat Defense, Ada...

72085 Posts

Duo Security

Get started with or get better at administering and using Duo by interacting with peers and experts!

3505 Posts

OpenDNS

Ask questions not covered by support articles and documentation.

3489 Posts

Activity in Security

Guidance for Virtual WSA with SMA Deployment

I have a requirement to deploy redundant WSA with SMA. Below are the licenses which i have.WEB-SEC-SUB – Cisco Web Security XaaS Subscription – 1WSA-WSP-LIC – Web Advantage SW Bundle (WREP+WUC+AMAL) License – 1000WSA-AMP-LIC – WSA Advanced Malware Pr...

MSN by Level 1
  • 299 Views
  • 2 replies
  • 0 Helpful votes

Secure workload Agent auto upgrade behaviour

Dear Team, We are observing duplicate agent entries in the Secure Workload dashboard. These entries are showing different/same agent versions along with varying check-in and check-out times, which seems unusual. Has anyone experienced a similar issue...

EAP-TLS vs PEAP-EAP-TLS performance question

Hello,I have a question about performance when using EAP-TLS and PEAP-MSCHAPv2 versus PEAP-EAP-TLS. Referring to the Cisco link: https://www.cisco.com/c/en/us/td/docs/security/ise/performance_and_scalability/b_ise_perf_and_scale.html#reference_dfk_mj...

Policy Based Routing on FTD managed by FDM

Hi, I'm trying to set up PBR (Route Maps) on FTD managed by FDM but I'm finding it impossible, on ASA it would look something like thisaccess-list ROUTEMAP-ACL1 extended permit tcp object CloudKey1 anyroute-map ROUTEMAP1 permit 10 match ip address R...

wcutajar by Level 1
  • 5830 Views
  • 15 replies
  • 0 Helpful votes

Need Help on configuring ASA5506

Every time I try to create a sub-interface in the ASA5506 on Cisco Packet Tracer, it shows the above error. I don't know why it's happening. Can anybody help me with this?

Screenshot 2025-08-21 at 12.48.41 AM.png
shobusi by Community Member
  • 139 Views
  • 1 replies
  • 0 Helpful votes

Network Tunnel Group archetecture

Please explain the concept described for Network Tunnel Groups. 1. Can we create one Tunnel Group with Hubs and connect multiple sites using its settings - up to the limit described in the link below. OR 2. We create one Tunnel Group with Hubs per si...

Resolved! ASA SG200 Port Negotiation.

G'day Folks. ASA 5515 (9.12(4).67)  and an SG200 24P (1.4.2.4)Is anyone aware of issues why an ASA gig0/0 inside interface only netgotiates 100MB when connecting to a Cisco SG200 SME switch?The ASA outside interface gig 0/5 and is fine and reaches gi...

SG200.png

Issues when logging into https://tools.cisco.com/sch/

Hello, When I log into https://tools.cisco.com/sch/, I am prompted to accept a license agreement, however when I scroll to the bottom of the page to Accept the agreement I see the following error:Click Accept Error Your connection has timed out. Plea...

MistrJoLI by Community Member
  • 382 Views
  • 5 replies
  • 0 Helpful votes

Default self sign certificate renewal on ISE

We are using default self sign certificate for EAP authentication in ISE and that certificate is being used for supplicant configuration on endpoints. Now this certificate is expiring, so if i choose an option available to renew default certificate o...

shahzada by Level 1
  • 288 Views
  • 2 replies
  • 0 Helpful votes

Resolved! Cisco ISE 3.2 with Azure AD

Hi all, About the configuration between ISE EAP-TLS with Microsoft Azure ID, i have some doubts: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/218197-configure-ise-3-2-eap-tls-with-azure-act.htmlProcedure: The certifica...

Resolved! CSIDL_BASEDIR Path Exclusion?

What does the CSIDL_BASEDIR path exclusion do? I keep looking online for documentation and can't seem to find anything that gives a clear answer.

NateGoSan by Level 1
  • 1311 Views
  • 8 replies
  • 0 Helpful votes