HiIf i enable CBAR from DNA center on switches that are managed via templates where interfaces is configured with 802.1x will this cause the switch interfaces to force a re-authentication?DNA will apply this line on all interfaces: ip nbar protocol-d...
Checking upgrade guide for 3.4, I can see that I can directly upgrade from 3.1 to 3.4? Is this now stable?https://www.cisco.com/c/en/us/td/docs/security/ise/3-4/upgrade_guide/Upgrade_Journey/Cisco_ISE_3-4_Upgrade_Journey.htmlPreviously I see posts to...
Hello, We have a policy-based VPN to a third party that randomly goes down briefly, but after it comes back up, we still lose messages for 15-20 minutes. Each side says they have no touched the config since it was created years ago. We got on a call ...
I'm unable to get any devices to scan today in Cisco Secure EndpointChecking the device's events, no failed scan or any other errors. Multiple tenants. Something going on with AMP?
Hello, does Cisco ISE solution work with Captive Portal Detection Option 114 to modernise the Captive Portal Detection process on Apple iOS Devices that support iOS 14+ see below Apple article: https://developer.apple.com/news/?id=q78sq5rv On the Cis...
Hi Cisco Community, I'm planning to upgrade our **Cisco Web Security Appliance (WSA)** from **AsyncOS 14.5.0-537** to **15.2.3-007**. Should anyone tell me the best practices and what to check before the upgrade? Looking for advice on:1. Any **criti...
Does anyone know what E3400 - Edge Compute and Cyber Vision is unable to launch.It keep stating there are too many concurrent sessions but I can see the last time it was launched was a week ago and there are no concurrent sessions active. What's goi...
Hi Team, I am trying to establish ipv6 bgp neighborship in ASA but it is stuck in 'NoNeg' stateASA-1# show bgp ipv6 unicast summaryBGP router identifier 1.1.1.1, local AS number 100BGP table version is 1, main routing table version 1Neighbor V AS Msg...
I'm currently looking at switching our RDP duo access to fail open to the more secure fail closed. My concern however is that we could be unable to access key servers if Duo was down.I created a breakglass user account and gave it the 'Bypass' status...
We have 2 nodes in the deployment and following the proceess of sponsor approval for guests. Please gave me an expertise on below scenarios: One node is always handling the traffics and the sponsor portal fqdn is resolving to both iPS in round Robi...
Hello! When we provision a simple configuration to switch via template (i.e. ACL or snmp credentials), DNAC additionaly provisions some configuration strings which I do not expect: aaa server radius dynamic-author client IP_A server-key 7 XXX clien...
Hi,I have two scenario seeking advise:1) to take advantage of Fortigate Geo-Blocking and integrate it with ASA SSL-VPN, I setup ASA behind fortigate like this in a LAB and it works fine. let me know if there is any consideration: - ASA Port 4 as Outs...
Hi, So we setup ISE and Entra ID integration with SAML.Access work fine for notebooks (tested on 10+ devices), but I am running with issue on some mobile devices. For some Android and iPhone device after redirect to login.microsoftonline.com page are...
