About mcoupe

mcoupe · 11-01-2021

I have an aged Oracle environment which is running TLS 1.0 for the encryption of database data synchronized between two sites (upgrading is not an option). When the database connection is made via an mpls network between the two sites there is no is...

mcoupe · 07-21-2021

Seems like this should work but I'm clearing missing something. I'm trying to send AAA requests for ssh access from administrative accounts to the M$ radius servers in the group RADAUTH_MFA because they are using the NPS plugin for Azure MFA and AAA...

mcoupe · 02-08-2019

I'm working from this document: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd64585/?reffering_site=dumpcr but the content is lacking a bit of polish and wondering if anyone has been able to get this working. Right now, my flexconfig is puking...

mcoupe · 11-02-2021

It appears we have a fix at this point. By adjusting the MSS setting on the FTDs to their maximum 1380 the fragmentation (in particular of the TLS handshake traffic) has been eliminated. Thus far, the applications which have been re-routed back to ...

mcoupe · 11-01-2021

Thanks for the reply. I should have mentioned that these are managed by FDM (and a vendor with whom I'm working). My understanding with FDM (we use FMC ourselves so I'm not that familiar with FDM) is that you don't have the ability to create pre-fi...

mcoupe · 07-28-2021

I was close, rather than send the request to RADAUTH_MFA and proxy just the service account back to RADAUTH, I got it working by sending requests to RADAUTH and proxying the administrative accounts to RADAUTH_MFA. This was needed because when RADAUTH...

mcoupe · 07-21-2021

What I'm looking into now is setting up a Connection Request Policy in the M$ NPS servers that are members of RADAUTH_MFA for the specific server account to forward the auth request back to the servers in RADAUTH, acting as a proxy (without adding a ...

mcoupe · 04-13-2021

Any response on a way to do this? I'm trying to do something very similar and all my research says no dice, NPS won't filter on anything other than membership in an AD group. So if you're trying to have one user in multiple groups and filter on som...

Member Since	‎08-25-2016 08:51 AM
Date Last Visited	‎07-15-2023 12:04 AM
Posts	10
Total Helpful Votes Received	5

User Statistics

User Activity

TLS 1.0 Handshake fails via S2S vpn tunnel

Directed AAA authentication

FTD 6.2.2.3 Flexconfig for ldap attribute mapping

Re: TLS 1.0 Handshake fails via S2S vpn tunnel

Re: TLS 1.0 Handshake fails via S2S vpn tunnel

Re: Directed AAA authentication

Re: Directed AAA authentication

Re: Cisco ASA with multiple groups for one user