About girafskind

girafskind · 10-12-2020

HiI have an ISE installation, on there i have an endpoint identity group.I wish to create a special user, which can be used to login to the GUI, and add/remove endpoints in that specific group. I've made the menu access, data access and the policy, s...

girafskind · 07-09-2020

Hi everyone, i have challenge. I have an small office network, 192.168.0.0/24.There's a ASA setup there, Anyconnect is enabled on it.Anyconnect runs full tunnel, no local LAN access.RA pool is 172.30.0.0/24.NAT exemptions is in place, overload is in ...

girafskind · 03-31-2020

I've been challenged with building an onboarding procedure for mobile phones, using ISE and WLC for redirecting unknown devices to a onboarding website. The MAC address for uniquely identifying the device have been scrapped in favor of the IMEI numbe...

girafskind · 04-02-2020

Hi, there's a lot of things that could be wrong. Are you using a browser, Postman, Python, etc? Have you looked into the REST API webinterface?https://[ASAIP]:[port]/doc/ There you can see examples on POST, GET etc, and also the request itself. Even ...

girafskind · 03-31-2020

They're right, it doesn't matter since its link-local addresses, but to remove them, just disable TCP/IPv6 on the Anyconnect interface.

girafskind · 03-31-2020

Hi, when you say the ethernet shuts down, how do you mean?Do you have access to services at work, but no access to devices on your local network? If so, it sounds like 'local LAN access' haven't been configured on the firewall which you're connecting...

girafskind · 03-31-2020

Hi, it looks like Anyconnect is searching for a certificate for authentication.Since You don't have any 'authentication-server-group' defined, it will look into the default tunnel-group, 'DefaultWEBVPNGroup'. You could try to specify LOCAL as authent...

girafskind · 03-31-2020

Hi Cristian, thank You very much. Then I'll think of another way of solving the onboarding process.

Member Since	‎02-13-2015 12:49 AM
Date Last Visited	‎04-17-2024 12:04 AM
Posts	13
Total Helpful Votes Received	5

User Statistics

User Activity

Access to specific "Endpoint Identity Group"

Anyconnect dupliucate IP

Cisco ISE and IMEI integration for mobile onboarding

Re: CISCO ASA REST API

Re: How to Disable IPv6 on AnyConnect

Re: Cisco Anyconnect disables my Ethernet.

Re: ASA 5508-x IPSEC VPN

Re: Cisco ISE and IMEI integration for mobile onboarding