Hi,   Is there any consideration for hostname of ESA interface facing internet ( private IP then be natted on FW) ?!    Must match published MX record ? I saw in environment that it works normally even hostname does not match published MX record    Also if there consideration of publishing ESA through 2 ISPs ( one MX record per ISP) using SD-WAN feature on FW please share ... View more

Hi,   when we install cisco anyconnect on PC Map network drive disappears although port might has no ISE configuration   so no authentication from ISE or posture check,   map network driver might not disappear from installation but it will disappear after random number of restart of windows machine   ... View more

Hello, If I have same domain name like example.com  and this domain is hosted external with number of users 4000  also hosted internally after ESA but only 2000 users from 4000 currently ESA work in receiving only and it works  when we put ESA in sending all public mails sent correctly but when user1@example.com send to user2@example.com it doesn't work as ESA not direct that mail to external host, ESA sends it again to exchange as defined in SMTP routes  is there any workaround to solve that ?! ... View more

Hello,   I have a VLN I have applied the license using loadlicense command  then I got additional feature key on the same VLN, I tried to check for new keys from vESA but it gives no keys,    <feature_key expiration="TIME" type="sophos">KEY</feature_key> the above is what appear in license file but I have removed time and key to paste key    I paste key in GUI but it gave error ( malformed key )   We can add only new feature keys on appliance not vESA ?!   the only option is to loadlicense but this will remove existing license  ... View more

Hello,   what happen if all feature keys of ESA expired, will the traffic still pass through Cisco ESA without any inspection or traffic will be dropped ? will it differ if incoming or outgoing traffic ? ... View more

Hello, We have ISE 1.2 and info sec team run a test and found these vulnerabilities please advise how to fix them   1.Information Disclosure (ROBOT Attack)   Vulnerability allows attackers to extract the private session key, decrypt that session, and eavesdrop encrypted communications, by sending specially crafted packets to the web server repeatedly. CVE: None   Disable RSA encryption for the key exchange algorithm. By disabling RSA encryption we mean all ciphers that start with TLS_RSA. It does not include the ciphers that use RSA signatures and include DHE or ECDHE in their name. These ciphers are not affected by our attack. In case an update is available, it is recommended that interested users install the latest version of the software or firmware of their products. As a mitigation solution, it is suggested that system administrators disable on the servers, where possible, the TLS encryption methods using RSA. For more information on the ROBOT attack, on vulnerable TLS implementations and on the mitigation solution, you can consult the following external sources: http://www.kb.cert.org/vuls/id/144389 https://robotattack.org/   ===========   2. Unauthorized Write Operations   The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in read only mode, which allows attackers to create zero-length files. CVE: CVE-2017-15906   To fix the vulnerability update your software according to the used platform. All necessary information is available here: https://www.openssh.com/ ... View more

we have appliance running version 4.2, we got configuration backup, installed ACS same version on windows server 2008 32 bit as when I tried to install acs 4.2 on 64 error it gives error that it needs 32 bit   we have restore configuration successfully and begin to migrate data to ACS 5.5 by migration tool which run on migration machine (windows server which run ACS 4.2)  but it give that error Fatal Error !! - cannot connect to ACS 4.x DB !! ... View more

Hello,   In certain WLCs with ISE compatibility we see that  Guest Originating URL is not supported but guest is supported Guest RADIUS CoA, URL Redirection + SessionID, Local Web Auth Guest Originating URL RADIUS CoA, URL Redirection + SessionID, Local Web Auth   just to confirm which we will loose if our WLC doesn't support Guest Originating URL   "Guest user is not redirect back to the original URL"  only this if we understand correct ? or something more we can loose ?! Thanks. ... View more