Greetings, Guys, I need some help with CSA. My client has the following scenario on it's remote assets: - Every remote asset have 4 IP interfaces through which the employee is able to connect to networks: Wired, Wi-Fi(a/b/g), 3G via USB and Bluet...
Good Day! Hello Net Pros, My name is Daniel Yamashita and I'm in charge of the deployment of the CCA in one of our customers. I've already made a couple of deployments using the 3350 and 3310 Cisco appliances, both in HA FO and Single modes and...
Greetings, I'm deploying the CSA solution in on of our custommers and I'm having some trouble in controlling the installation of third-party softwares. I tried using these settings: Windows Rule Module: Block 3rd Installations System State: I...
Greetings, Guys, I'm using CCA v4.5 and I'm having a hard time updating it's Rules/Lists/Policies for Clean Access. I've arranged that the CAM has connectivity to WAN-Internet so it can download the updates but after running the process this is wha...
Greetings, I'm having a hard time here. One our customers uses a Cisco ASA 5540(IOS 8.0(3)10) and Cisco VPN Client v.5 to establish IPSec tunnels through the Internet. When the remote user is behind ADSL Modems or Cable Modems there is not a single ...
Greetings 'followurself'! Again, sorry for taking this long to answer but things have been pretty busy down here! I didn't quite understand what you actually need. Could post what is that you need exactly? Please give as much detail as you can, no ...
Greetings "followurself", Sorry taking this long to answer but yes, I've managed to deploy the CSA as our customer wanted. I've decided to create my own Rule and Policy Modules. I'm not sure if this is what you need but here is a simple sketch: C...
Hello Farrukh! Yes! That was exactly what I told out customer. But after a second I thought it could be possible because what differs the two rules is the Source Address. - In the first rule 'Ast#03' the source address is one from the 10.16.0.0/...
Hello Farrukh! I'd like to Thank you for your reply! It worked! But...I'm having a new problem since there is another DNAT based on the Source Address I have to configure. When HTTP flows from the 10.11.0.0/16 network destined to the host 10.13.1.2...