Hi, We are working on Anyconnect remote access VPN with ASA and ISE.  I have configured static ISE IP address in ISE posture "Unknown" profile so that ISE will send redirect URL with ISE IP address instead of FQDN. End user system can't resolve ISE FQDN hence configured this setting.   But ISE is sending two redirect URLs one with FQDN and other one with IP address as shown in attached document.    Is it normal behaviour?  Will end user system process URL with IP address? or URL with FQDN will take precedence? ... View more

Hi Team, Customer wants to have solution for below points using Cisco ASA SSL remote access VPN solution:   Should have feature to control end points: Detection of files, registry keys, running processes and Device Watermarks; Advanced Interrogator: (simplified granular end point detection, including detailed configuration information on over 100 anti-virus, anti-spyware and personal VPN solutions, including McAfee, Symantec, Sophos and Trend) Data Protection: Cache Control (data protection), Secure Desktop (advanced data protection); Includes jailbreak or root detection for iOS and Android devices.   I could find our Cisco SSL remote access vpn solution on ASA supports files, registry, process, AV using Hostscan. But could not get information on Device watermarks, data protection: Cache control and jailbreak or root detection for iOS and Android devices. Is it supported?   Should have access control features : User and group, Source IP and network, Destination network, Service/Port (On Demand and Connect only) Define resources by destination URL, host name or IP address, IP range, subnet and domain, Day, date, time and range, Browser encryption key length, Policy Zones (allows, denies and quarantines access and provides data protection based on end point security profile), File system access controls.  Some of the requirements will be fulfilled by configuring connection profiles and Dynamic access policy. But not sure of Browser encryption key length source IP & network ( not sure which source IP they are talking?)   Should support customised workplace/portal for smart phone and tablet browser.  – Is it possible to have customized portal for smart phone and tablet? Kindly provide reply on above queries.   ... View more

Hi Expert, Customer is looking for Active/Active deployment for NGFW 4100. The solution is to use firewalls in cluster setup and make A/A by using Etherchannel load balancing scheme.   Queries are: 1. Can it be deployed for two firewalls setup? 2. Will Master unit entertain user traffic? 3. Any issues/limitation for cluster in two firewall deployment?   Kindly share your thoughts on same.   ... View more