Software-Defined Access (SD-Access)

Team, In preparation for our customer Alameda County's Executive Briefing Review could you please advise whether our Cisco SDA's micro-segmentation using Virtual Networks is CJIS for law enforcement and HIPAA for health care compliant?Today Alameda C...

I have a question about designing & assigning the IP Address Pools and SD-Access Policy across multiple Fabric sites.  First, is it a good design to have the “Users/Campus/Enterprise” VN be available across multiple Fabric sites so the same security ...

Hello,   I have a Customer that uses different PCs registered to different MS Active Directory domains (with no trust between each other) on the same LAN. I know that ISE can connect up to 50 isolated MS AD domains, but I would like to confirm that t...

Hello,   I know that ISE and Cat 9000 switches do support multiple authentication fallback configuration, including WebAuth. I would like to confirm if wired WebAuth based on ISE DB (eg. wired guest access) is supported in a SDA fabric, and in detail...

I've been doing routing/switching/security for more than 20 years, but I know nothing about SDN.  The documentation and videos I've found online are all High-level overviews.  They seem to be more marketing fluff than something useful for an engineer...

HelloIt was learned from Cisco Live's SDA Deep Dive session that need for fusion device will be eliminated in DNA Release 1.4.Data Center Switches, Firewall & WAN Border can directly connect to Fabric Borders Please correct me I am wrong

The question is moved to DNAC community 

Hi All, I understand that DNAC 1.2.10 provided the ability to deploy embedded 9800 eWLC on the Catalyst 9300 switch. I have researched and it appears that I need to install either IOS-XE 16.10.1e or 16.11.1c on the Catalyst 9300 along with the associ...

Hi there, I would like to know what are the ways to migrate catalyst 9k switches already running in the network which is configured with dot1x and needs to be migrated to Cisco SDA.  Current setup of the customer:They have 4 branches and 1 HQ where t...

With SDA/TRUSTSEC and ISE in the mix .Try to look at options. lets say you have a SGT for headless devices - cameras, HVAC, badge readers etc. So are you saying that create a VLAN/subnet for each of them ? So, then what do you put as the default VLAN...

Seeing following alert on DNAC for multiple switches. HTTPS is NOT reachable / SCP is reachableExpected : DNAC certificate has to be installed successfully and Device should be able to reach DNAC via HTTPSAction : Reinstall DNAC certificate Anyone ca...