About rchockeelopez

rchockeelopez · ‎10-15-2019

Hi, 2.4 Patch 10 has already launched. Have you test it ? I have the same issue with comodo certificates with 2.4 patch 9.

rchockeelopez · ‎10-15-2019

Patch 10 is already release. Have you test it with patch 10? I have the same issue with comodo certificates.

rchockeelopez · ‎04-06-2017

Hi Paul, Thanks a lot. I found to make it work. I forgot to mention that the customer has ISE as a radius server and that we were trying MAC-IP reservations based on user-AD. It did not work with Windows DHCP Server MAC-IP reservations. So we made it work with ISE. The only disadvantage is that is not practical to add rules for each user and MAC-address. For example if there are 50 users with MAC-IP reservations we need to create 50 rules in ISE. If there is some other way to manage the reservations on the Windows DHCP Server instead of the ISE? Some links that can be helpful. https://supportforums.cisco.com/discussion/11923261/assign-static-ip-address-asa-vpn-clients-ise https://supportforums.cisco.com/discussion/11695526/ise-and-static-ip-assigment Thanks. Regards.

rchockeelopez · ‎04-05-2017

Hi, This is the topology. Users are connecting via AnyConnect VPN and are getting authorized with ISE and AD. Windows DHCP Server is giving dynamically IP addreses. The customer wants to assign static MAC-IP binding in the DHCP Server so they can use the firewall to filter based on the VPN IP addresses. Internet ----- ASA ------ LAN --- ISE and Windows DHCP Server. Can you provide more information how can I assign MAC-IP binding in a Windows DHCP Server through AnyConnect VPN and ISE. Would it work by just configuring the DHCP relay on the ASA? Thanks.

rchockeelopez · ‎04-05-2017

Hi, This is the topology. Users are connecting via AnyConnect VPN and are getting authorized with ISE and AD. Windows DHCP Server is giving dynamically IP addreses. The customer wants to assign static MAC-IP binding in the DHCP Server so they can use the firewall to filter based on the VPN IP addresses. Internet ----- ASA ------ LAN --- ISE and Windows DHCP Server. Can you provide more information how can I assign MAC-IP binding in a Windows DHCP Server through AnyConnect VPN and ISE. Thanks.

rchockeelopez · ‎04-05-2017

Hi, This is the topology. Users are connecting via AnyConnect VPN and are getting authorized with ISE and AD. Windows DHCP Server is giving dynamically IP addreses. The customer wants to assign static MAC-IP binding in the DHCP Server so they can use the firewall to filter based on the VPN IP addresses. Internet ----- ASA ------ LAN --- ISE and Windows DHCP Server. Can you provide more information how can I assign MAC-IP binding in a Windows DHCP Server through AnyConnect VPN and ISE. Thanks.

rchockeelopez · ‎04-05-2017

Hi, This is the topology. Users are connecting via AnyConnect VPN and are getting authorized with ISE and AD. Windows DHCP Server is giving dynamically IP addreses. The customer wants to assign static MAC-IP binding in the DHCP Server so they can use the firewall to filter based on the VPN IP addresses. Internet ----- ASA ------ LAN --- ISE and Windows DHCP Server. Can you provide more information how can I assign MAC-IP binding in a Windows DHCP Server through AnyConnect VPN and ISE. Thanks.

rchockeelopez · ‎04-05-2017

Hi, This is the topology. Users are connecting via AnyConnect VPN and are getting authorized with ISE and AD. Windows DHCP Server is giving dynamically IP addreses. The customer wants to assign static MAC-IP binding in the DHCP Server so they can use the firewall to filter based on the VPN IP addresses. Internet ----- ASA ------ LAN --- ISE and Windows DHCP Server. Can you provide more information how can I assign MAC-IP binding in a Windows DHCP Server through AnyConnect VPN and ISE. Thanks.

rchockeelopez · ‎04-05-2017

Hi This is the topology: Internet ---- ASA ------LAN ----DHCP Server (Windows) The customers wants to assign static addreses through AnyConnect with a Windows DHCP Server. Is it possible? Thanks.

rchockeelopez · ‎03-31-2017

Hi, This is the topology. Internet ---- router ---- ASA FirePower ----- Fortigate --- LAN. The ASA FirePower is already blocking the following vulnerability. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170310-struts2 But the customer found out that in the Fortigate it is blocking the vulnerability. So that is why they are assuming that the ASA firepower is not blocking the attack. Any feedback would be helpful as always. Thanks.

rchockeelopez · ‎03-31-2017

Hi, This is the topology. Internet ---- router ---- ASA FirePower ----- Fortigate --- LAN. The ASA FirePower is already blocking the following vulnerability. https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170310-struts2 But the customer found out that in the Fortigate it is blocking the vulnerability. So that is why they are assuming that the ASA firepower is not blocking the attack. Any feedback would be helpful as always. Thanks.

rchockeelopez · ‎03-27-2017

I got the same issue with the sponsor portal certificate that has a mismatch in the name of the certificate. I have setup FQDN in the sponsor portal settings. Can you please help me?

rchockeelopez · ‎02-16-2017

got same issues with onboarding few androids in the google play page. When I press the google play button it disconnects from the Wifi connection. Hope you can help.

rchockeelopez · ‎04-02-2016

There is a workaround for Windows 10 changing some registry options. https://support.microsoft.com/en-us/kb/3121002

rchockeelopez · ‎04-02-2016

Yes. Check the links. Got the same error. The solution was to install Cisco supplicant AnyConnect NAM. https://support.microsoft.com/en-us/kb/3121002 There is a bug with 802.1x in Windows 10 also. Regards https://supportforums.cisco.com/discussion/12528016/support-windows-10#comment-11262956

rchockeelopez · 10-15-2019

Hi, 2.4 Patch 10 has already launched. Have you test it ?I have the same issue with comodo certifica...

rchockeelopez · 10-15-2019

Patch 10 is already release. Have you test it with patch 10?I have the same issue with comodo certif...

rchockeelopez · 04-06-2017

Hi Paul,Thanks a lot.I found to make it work. I forgot to mention that the customer has ISE as a rad...

rchockeelopez · 04-05-2017