About Chris Evans

Chris Evans · 04-24-2020

I have a customer on ISE 2.3 code that needs to be running in FIPS-compliance (which I am interpreting as FIPS140-2). I know we can turn on FIPS-compliant mode to enforce settings for FIPS compliance (cert size, cyphers, etc etc), but is this code le...

Chris Evans · 05-06-2019

All: I've got a customer that has a business requirement for FIDO2 (WebauthN)authentication for their VPN clients. They plan on using Yubikey or similar token hardware for end users to authenticate. From what I've seen so far, this isn't supported i...

Chris Evans · 05-01-2019

I have a customer currently using ASA VPN authentication -> ISE -> Microsoft AD. They have SAML on OpenAM and are requesting assistance from me in integrating ISE into the authentication with the end goal of SAML authentication of VPN users. Links a...

Chris Evans · 02-01-2013

I'm trying to mull over what profiling options are available for VPN users. I have an environment using ASA VPN in conjunction with ISE IPN to allow full posturing for VPN clients prior to allowing network access. The use case here is we want to al...

Chris Evans · 08-23-2012

Running into what appears to be an insurmountable obstacle in this environment.I have an ASA 5512-X in place as the edge firewall and want to use the IDS module. The inside is 2 "flat" networks - that is, their default gateway points to the ASA itse...

Chris Evans · 05-07-2019

Thanks for the quick reply! Very helpful. After reading your reply I subsequently wondered if there'd be better luck for this if we used the thin client rather than the full Anyconnect client - perhaps that would add the client-side support needed f...

Chris Evans · 05-02-2019

A further point that I should iterate - I had originally thought that the intention of SAML within this environment was for SSO for end users using SAML for authentication to other assets. That may still be the case, but they are indeed using the ba...

Chris Evans · 09-07-2010

See inline answers:The questions I wasn’t able to answer are:• Can the ACS work in a heterogeneous environment (i.e. Cisco and Alcatel Switches)?Yes, as long as those devices support RADIUS and TACACS+ IETF standards. Some devices require the co...

Member Since	‎09-07-2010 01:02 PM
Date Last Visited	‎04-24-2024 12:05 AM
Posts	10

User Statistics

User Activity

Clarification on FIPS compliance code requirements for ISE

FIDO2 support or planned support for Anyconnect?

Clarification on SAML authentication support for VPN in ISE

ISE Profiling options for VPN clients

Routing woes with IPS module in ASA-5512-X

Re: FIDO2 support or planned support for Anyconnect?

Re: Clarification on SAML authentication support for VPN in ISE

Re: Features of Cisco Secure ACS Appliance