turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Peter Koltl
Online
Peter Koltl
Member since
01-08-2010
Contributor
CCIE #10192
Personal Web Page : http://ltlnetworker.wordpress.com
718
Posts
245
Helpful
49
Solutions
Recent Badges
Awards
3
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
02-08-2019
06:47 AM
02-08-2019
06:47 AM
Jason, in which CTA version was Java removed?
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
01-26-2019
01:29 PM
01-26-2019
01:29 PM
You can specify in group policy how the ASA changes the client’s proxy setting upon establishing the tunnel.
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
01-01-2019
02:50 PM
01-01-2019
02:50 PM
Is it a hostscan aka ASA posture?
Or is it a System scan aka ISE posture?
Is there a System Scan window in the client?
... View more
10-01-2018
02:01 PM
Created by
Peter Koltl
in Unified Computing System Discussions
in Unified Computing System Discussions
09-30-2018
01:11 AM
09-30-2018
01:11 AM
Do only HTTPS connections fail to CIMC or does SSH and ping too?
... View more
Created by
Peter Koltl
in Security Analytics and Management
in Security Analytics and Management
09-04-2018
03:11 AM
09-04-2018
03:11 AM
CSCvg18306
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
08-07-2018
01:28 PM
08-07-2018
01:28 PM
The VPN headend (ASA or FTD) will always try to upgrade a client who connects with an older version of AnyConnect using the locally stored and configured pkg file.
Unless skipping the update is enabled in the XML Client Profile.
... View more
08-07-2018
12:25 PM
The logic is like this:
nat (outside,asaic) source dynamic any4 obj-hideaddr destination static PUB-B PRIV-B unidirectional
Source Internet addresses must be hide-NATed otherwise return traffic would exit on PUB-C interface.
Destination address translation follows the usual static translation method.
asaic is the ASA interconnect link. Never use the 'failover' term for something that is not failover.
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
07-02-2018
02:50 AM
07-02-2018
02:50 AM
We use AnyConnect with ISE Posture module. A user reports that the posture scan lasts longer if he connects with AnyConnect right after boot and logon. The posture scan checks if SCCM client is enabled and checks McAfee antivirus. The following Windows services are set to Delay Start: Security Center SMS Agent Host Windows Update We would like to know if AnyConnect waits for these services to start when running the posture scan. Does it explain longer posture check period?
... View more
- Tags:
- ise-posture
Labels:
06-25-2018
01:31 AM
To use secure copy, first enable secure shell (SSH), and then enter the following command:
hostname# ssh scopy enable
From a Linux client, enter the following command:
scp -v -pw password filename username@asa_address
The -v is for verbose, and if -pw is not specified, you will be prompted for a password.
... View more
05-22-2018
03:05 AM
ASA 9.5.1 introduced separate routing table for management interface.
... View more
Created by
Peter Koltl
in Policy and Access
in Policy and Access
03-07-2018
11:49 PM
03-07-2018
11:49 PM
Marc, did it go smoothly?
... View more
Created by
Peter Koltl
in Identity Services Engine (ISE)
a week ago
a week ago
John, OU or other field: not suitable to determine the identity, not
suitable for authentication sui...
Created by
Peter Koltl
in VPN and AnyConnect
a week ago
a week ago
Jason, in which CTA version was Java removed?
2 weeks ago
I was surprised too but our Cat3850s with IBNS2 syntax send CDP, LLDP
TLV info in Access-Request pac...
2 weeks ago
Events: ISE receives posture report second evaluation of authZ policy
starts on ISE (top-down first ...
Created by
Peter Koltl
in Identity Services Engine (ISE)
2 weeks ago
2 weeks ago
You should definitely not upgrade to 2.0. Upgrade from 1.4 to 2.0.1
directly to get better results.
Created by
Peter Koltl
in VPN and AnyConnect
3 weeks ago
3 weeks ago
You can specify in group policy how the ASA changes the client’s proxy
setting upon establishing the...
Created by
Peter Koltl
in Identity Services Engine (ISE)
4 weeks ago
4 weeks ago
Remote access or 802.1X ?
Created by
Peter Koltl
in VPN and AnyConnect
01-01-2019 02:50 PM
01-01-2019 02:50 PM
Is it a hostscan aka ASA posture? Or is it a System scan aka ISE
posture? Is there a System Scan win...
Created by
Peter Koltl
in Identity Services Engine (ISE)
12-18-2018 07:05 AM
12-18-2018 07:05 AM
As far as I know at least MAB is required. Use monitor mode or return
Permit from ISE unconditionall...
Created by
Peter Koltl
in Identity Services Engine (ISE)
12-18-2018 06:55 AM
12-18-2018 06:55 AM
We are troubleshooting an ISE-SCCM integration issue. The SCCM settings
have been applied according ...
Created by
Peter Koltl
in Identity Services Engine (ISE)
10-19-2018 01:13 AM
10-19-2018 01:13 AM
What is the difference?
Created by
Peter Koltl
in Identity Services Engine (ISE)
09-30-2018 03:35 AM
09-30-2018 03:35 AM
You need to have an authentication rule covering PAP in the Allowed
Protocols list.
Public Statistics
| Date Registered | 01-08-2010 01:53 PM |
| Date Last Visited | 02-16-2019 01:44 PM |
| Total Messages Posted | 718 |
| Total Helpful Votes Received | 245 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 30 | |
| 41 | |
| 5 | |
| 55 | |
| 15 |
.jpg "VIP Collaborator"){kind=icon}
Helpful Votes From
.jpg "Hall of Fame Master"){kind=icon}
Awards
Community Spotlight Award
Mobile User, February 2016
Community Spotlight Award
Member's Choice, March 2016
Community Spotlight Award
Mobile User, September 2015
