Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have just upgraded to 2.6 and on boarding is not working.Deployment is two nodes only.Original setup is an external MS PKI SCEP setup and would like to move away from this.The server certs used for all roles are issued from our MS PKI infrastructu...
Hi Everyone,We are looking for ideas on how best to document a firewall solution; NAT'ing, rules, interfaces etc. We have spreadsheets, but they don't really cut it.Regards,Scott
Hi, I was wanting to know what people use to document firewall rules. We have a reasonably complex set of rules and NATs etc. At present I am using Excel as I think it would be very difficult to make an easy to read Visio diagram. But Excel is not t...
I have a Cisco 877 that has a ADSL interface and two internal VLANS assigned to different switch ports. Running ADV IP Services.The problem I have is that I cannot get the host in the VLAN3 (192.168.100.75) to access DNS servers on the Internet. Ther...
Hi,In our network we have about 90 switches. All core and distribution layer switches have redundant links. Spanning tree is configured and seems to be working, in that is is blocking appropriate ports. Cisco Network assistant is an easy way to see t...
I also agree. Also in line with this problem is the fact that traffic destined to the actual interface IP of the FTD is not logged. Do a filter with connection events and you will find out. Appalling, for a security device.
Thanks for the reply. I think I have figured out that part. As I understand, ISE installs the root cert from the portal, to enable it to have a trust to push out the profile. So the only way I can get our PKI root installed is by having a cert signed...
Thanks for the reply, but I am not sure what exactly you mean by "BYOD enrollment profile". So I have attached what I think is relevent. We are still getting the Sectigo root installed when onboarding like this, even though it is only referenced with...
Thanks for a great guide. I only wish ALL of the images were actually readable. Some of them are tiny. I find this a common problem with Cisco documentation. Cheers
