About Jalmeida

Jalmeida · 11-05-2024

Hello Guys, Could you help me understand if this flow is correct: Some employees came from another country and are reporting a problem with the Corporate connection. The ISE log reports that the endpoint is not trusting the certificates that the IS...

Jalmeida · 10-02-2024

Dear all, I am new to security issues and I have a complicated scenario. I changed the IP addresses so as not to expose the network, but the scenario is complete. I have 2 branches in Brazil that communicate via LAN-to-LAN. Wherever I close the VPN (...

Jalmeida · 08-14-2024

Sirs Controller in DMZ is new to me, and a question arose. We have a WLC9800 that closes a tunnel with a 5508 that is in the DMZ. Everything works normally, but now, we plan to configure a new 9800 that will be used as a Backup. On the current 980...

Jalmeida · 07-10-2024

Sirs,I had doubts about a problem.The client does not have a GPO for Wireless, which is why we use the machine's certificate to validate access.We create an identity using the certificate and configure the policy set to check TLS first; Then the User...

Jalmeida · 06-06-2024

My firepower lost communication with the Satellite/Call Home. The SLDest DNS was changed and we lost the domain name. Talking to the customer, he was unable to create a DNS entry, and currently our On-Prem License only responds to the IP address.Prob...

Jalmeida · 11-05-2024

Hello @Greg Gibbs Thaks for update. The issue is that they are random customers who come from another country. I am trying to follow the guidelines in this documentation. https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/2...

Jalmeida · 10-02-2024

Thank you for your quick response.I'll do some research, since the environment is in production, I don't know if this configuration will have any impact.I'll build the lines and apply them at some point. Do you have an example with the IPs I mentione...

Jalmeida · 08-14-2024

Perfect!Perfect!Perfeito!That was the question I had.Thanks for the clarity in the saved answer!

Jalmeida · 08-14-2024

Hello @Flavio Miranda Thank you for your quick response.I apologize for not being clear in my question. My current environment is: 1 5508 in the DMZ (Guest) 2 9800 in SSO (site A) I will configure a new 9800 (site B ), because if the SSO of site A f...

Jalmeida · 07-15-2024

Perfect! Thank you very much for your coherence and clarity in details.The situation is that the client does not actually have the ISE certificate. And as there are several machines, the client will generate new root and trusted certificates in ISE t...

Member Since	‎07-17-2023 09:40 AM
Date Last Visited	‎12-30-2024 06:22 AM
Posts	57
Total Helpful Votes Received	2

User Statistics

User Activity

Endpoint from another country - 12511 Unexpectedly received TLS alert

AnyConnect VPN - External client cannot access my internal network

Questions about a new Mobility member (5508 with 9800)

EAP-TLS Computer Domain Failure

Firepower 9300 No license registration | Satellite/Call Home

Re: Endpoint from another country - 12511 Unexpectedly received TLS al

Re: AnyConnect VPN - External client cannot access my internal network

Re: Questions about a new Mobility member (5508 with 9800)

Re: Questions about a new Mobility member (5508 with 9800)

Re: EAP-TLS Computer Domain Failure