About nspasov

nspasov · 07-02-2019

Overview In this setup, ISE will forward the TACACS+ authentication requests to the Duo Authentication proxy. The proxy will check AD and if the authentication is successful, the end user/admin will be send a "Duo Push." If the AD authentication fai...

nspasov · 07-02-2019

Contents OverviewDetailed StepsAssumptionsComponents UsedDuo System ConfigurationDownload, Install and Configure Duo's Authentication ProxyConfiguring ISECreate Admin Group and Admin User in ISEAdd Duo's Authentication Proxies as RADIUS Token Servers...

nspasov · 05-17-2019

I was trying to get a Self-Service/Password Change portal based on the instructions provided in the thread below but I am not able to get it working: https://community.cisco.com/t5/identity-services-engine-ise/ise-password-change-portal-ucp-with-my-d...

nspasov · 04-24-2019

Has anyone done a pxGrid integration between Cisco ISE and IBM's Vulnerability manager through pxGrid? I did a lot of searching and was able to find docs for Rapid-7 and Nessus but nothing with regards to IBM's QVM. There seems to be a SIEM integrati...

nspasov · 04-16-2019

One of my customers needs to place different BYOD devices in different endpoint groups during the BYOD onboarding/provisioning. However, the BYOD portal does not offer this functionality. Instead, the portal is tied to a specific endpoint group where...

nspasov · 02-03-2026

Hi there! Can you please elaborate a bit more on what you are trying to accomplish? The title asks about license transfer but the body mentions software transfer. There isn't a 2105 appliance model  Thank you for rating helpful posts!

nspasov · 01-28-2026

Have you explored the Secure Firewall Migration Tool: https://www.cisco.com/site/us/en/products/security/firewalls/secure-firewall-migration-tool/index.html This is the official documentation with all of the supported migration scenarios: https://www...

nspasov · 01-14-2026

It is hard to say without additional information. Issues like this typically require live troubleshooting with access to the setup. Thus, it is probably best to engage TAC. Nonetheless, we can try here: Do you have a diagram / sketch of the setup?How...

nspasov · 01-14-2026

If you have public IPs then you can absolutely use those for reachability between the FMCv and the remote appliances. You can also use NAT and NAT-ID if you want to preserve your public IPs. There are several options here and I suggest you review thi...

nspasov · 12-21-2025

Based on the information you shared, my understanding is that you are assigning privilege-level 7 for the read-only users, correct? If yes, there are additional configurations required: By default any privilege levels outside of 0,1 & 15 are "blank /...

Member Since	‎06-25-2010 04:48 AM
Date Last Visited	‎09-30-2026 01:10 AM
Posts	2,834
Total Helpful Votes Received	2616

User Statistics

User Activity

Duo MFA Integration with ISE for TACACS+ Device Administration with Microsoft Active Directory Users

Duo MFA Integration with ISE for TACACS+ Device Administration with Local/Internal (ISE) Users

ISE-2.6-Self Service/Password Change Portal Not Working

ISE Integration with IBM QVM (QRadar Vulnerability Manager)

Ability to place BYOD endpoint in specific group during provisioning/onboarding

Re: Transferring licences between firewalls

Re: Migration ASA to FTD

Re: Slowness after using ECMP

Re: FTD over Remote FMC - 2 FMC Setup

Re: Microsoft NPS Radius for Switch Authenticate and Authorization