Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm just starting to look into the Cisco Umbrella product and while I'm still in the early stages of my research and learning the more I learn the more it seems like FTD and Umbrella have overlap. Its very possible I'm missing something so I wanted ...
Please check the following:1: Verify the management interface is up/up on your switch and the switchport has the correct access port configuration (correct VLAN correlating to the IP/Network you configured on the chassis).
2: Check to see if you can ...
After reviewing the configurations I didn't see anything ASA related that should prevent this ICMP ping flow.
I would next verify the route path between these two ASAs.
The BE-ASA routes traffic destined to 10.96.18.240 to 10.96.116.1. Since you are...
The functionality you describe is possible. However not in the exact manner you describe.Duo doesn't query ASA as the primary identity source. Instead you would need to setup a second authentication server (pointing to the Duo Authentication Proxy)...
I'm not sure about LUA - but there might be a way to achieve your desired outcome under the regular DAP criteria. I have not tested this out to verify legitimacy.
1: Create your DAP policy with your first record (lowest priority value) set to 'termi...