About Jack G

Jack G · 03-05-2024

I'm having intermittent issues on a few machines after upgrading from Secure Client 5.0.x to 5.1.2.42 and upgraded the Umbrella roaming client to the Umbrella module. I even removed everything, reinstalled just the 5.1.2.42 VPN core, and the Windows ...

Jack G · 12-08-2023

Have a situation where the user connects to the VPN with SBL (it connects fine), but when they login to the computer, they have to open Secure Client again and connect to the VPN all over. Thoughts on why it's not staying connected after workstation ...

Jack G · 08-25-2023

I'm interested in deploying Easy Connect via ISE-PIC Essentials. Seems pretty simple from a wired perspective, but does it work with wireless? We use Aironet's with one acting as a WLC. Switches are catalysts.

Jack G · 08-21-2023

I configured RAVPN with SAML authentication. I'm using external browser and Azure/Entra for the identity provider. From an Azure/Entra joined computer, I tried to use "Start VPN when Cisco Secure Client is started", but I'm being prompted for usernam...

Jack G · 04-13-2023

Per the documentation, what can be local certificate be used for? Can it be used to ensure the machine connecting to the VPN is a member of the domain or is there a better way to go about that? Don't have an ISE deployment. I can't seem to find addit...

Jack G · 04-18-2024

Got it to work, used a program X - Certificate and Key management to generate a self signed CA and then another certificate with CA:true. Not sure how to get it to word with a Windows CA server. I also didn't put in the FQDN for the Outside interface...

Jack G · 04-17-2024

found this: Configure RAVPN with SAML Authentication Using Azure as IdP on FTD Managed by FDM 7.2 and Lower - Cisco Question is how do I sign the CSR with a Windows CA? The signed certificate appears to remove the CA:true. Do I need to use specific t...

Jack G · 03-07-2024

This seems to fix it per TAC suggestion: One thing I suggest changing is to allow DNS through the tunnel, because you have the option: split-tunnel-all-dns disable. I suggest you make the change and test it again:

Jack G · 03-07-2024

Installed the latest Secure Client which fixed it.

Jack G · 08-31-2023

Yes, ECMP and path monitoring does appear to be the way to go. Wondering what's left before an FTD can be considered "SD-WAN"

Member Since	‎08-31-2010 09:38 AM
Date Last Visited	‎04-18-2024 06:41 AM
Posts	78
Total Helpful Votes Received	21

User Statistics

User Activity

DNS hostname intermittently not resolving, root domain resolves ok

Secure Client SBL disconnecting after user workstation login

Does Easy Connect support wireless?

"Start VPN when Cisco Secure Client is started" and SAML

Secure Client/AnyConnect posture, local certificate option?

Re: SAML IdP Certificate Error for FTD Running 7.0.1 Managed by FDM

Re: SAML IdP Certificate Error for FTD Running 7.0.1 Managed by FDM

Re: DNS hostname intermittently not resolving, root domain resolves ok

Re: Secure Client SBL disconnecting after user workstation login

Re: FTD Dual ISP Loadbalancing