Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Peter Koltl
04-16-2019
Peter Koltl
Member since
01-08-2010
Contributor
CCIE #10192
Personal Web Page : http://ltlnetworker.wordpress.com
726
Posts
255
Helpful
50
Solutions
Recent Badges
Awards
3
Created by
Peter Koltl
in Policy and Access
in Policy and Access
03-25-2019
10:20 AM
03-25-2019
10:20 AM
Without a Certificate Authentifacion Profile ISE tries only password-based authentication methods and does not attempt to authenticate the session with a certificate.
... View more
03-24-2019
08:43 AM
I am not sure how a standard ACL is evaluated in a route-map. Are you positive that acl_pbr does what you intend to? It has a deny line for net_y then permit everything else and you expect to set next-hop for all the packets coming from net_y... I would create a different extended ACL.
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
03-14-2019
02:16 PM
03-14-2019
02:16 PM
Dynamic split tunneling
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
02-08-2019
06:47 AM
02-08-2019
06:47 AM
Jason, in which CTA version was Java removed?
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
01-26-2019
01:29 PM
01-26-2019
01:29 PM
You can specify in group policy how the ASA changes the client’s proxy setting upon establishing the tunnel.
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
01-01-2019
02:50 PM
01-01-2019
02:50 PM
Is it a hostscan aka ASA posture?
Or is it a System scan aka ISE posture?
Is there a System Scan window in the client?
... View more
10-01-2018
02:01 PM
Created by
Peter Koltl
in Unified Computing System Discussions
in Unified Computing System Discussions
09-30-2018
01:11 AM
09-30-2018
01:11 AM
Do only HTTPS connections fail to CIMC or does SSH and ping too?
... View more
Created by
Peter Koltl
in Security Analytics and Management
in Security Analytics and Management
09-04-2018
03:11 AM
09-04-2018
03:11 AM
CSCvg18306
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
08-07-2018
01:28 PM
08-07-2018
01:28 PM
The VPN headend (ASA or FTD) will always try to upgrade a client who connects with an older version of AnyConnect using the locally stored and configured pkg file.
Unless skipping the update is enabled in the XML Client Profile.
... View more
08-07-2018
12:25 PM
The logic is like this:
nat (outside,asaic) source dynamic any4 obj-hideaddr destination static PUB-B PRIV-B unidirectional
Source Internet addresses must be hide-NATed otherwise return traffic would exit on PUB-C interface.
Destination address translation follows the usual static translation method.
asaic is the ASA interconnect link. Never use the 'failover' term for something that is not failover.
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
07-02-2018
02:50 AM
07-02-2018
02:50 AM
We use AnyConnect with ISE Posture module. A user reports that the posture scan lasts longer if he connects with AnyConnect right after boot and logon. The posture scan checks if SCCM client is enabled and checks McAfee antivirus. The following Windows services are set to Delay Start: Security Center SMS Agent Host Windows Update We would like to know if AnyConnect waits for these services to start when running the posture scan. Does it explain longer posture check period?
... View more
- Tags:
- ise-posture
Labels:
4 weeks ago
Without a Certificate Authentifacion Profile ISE tries only
password-based authentication methods an...
Created by
Peter Koltl
in Identity Services Engine (ISE)
4 weeks ago
4 weeks ago
Christopher, You should define an AAA server group in ASA and set the
Connection Profile/Tunnel Grou...
a month ago
Secondary PAN node has already the same synchronized configuration so
there is no point in restoring...
Created by
Peter Koltl
in Switching
a month ago
a month ago
I am not sure how a standard ACL is evaluated in a route-map. Are you
positive that acl_pbr does wha...
Created by
Peter Koltl
in Identity Services Engine (ISE)
03-16-2019 02:08 PM
03-16-2019 02:08 PM
Sometimes the ISE node does not send the intermediate certificate along
with its certificate during ...
Created by
Peter Koltl
in VPN and AnyConnect
03-14-2019 02:16 PM
03-14-2019 02:16 PM
Dynamic split tunneling
Created by
Peter Koltl
in Cisco Digital Network Architecture (DNA)
03-06-2019 09:41 AM
03-06-2019 09:41 AM
As I understand, DNA Center can have a server certificate (configured
under System Settings > Settin...
Created by
Peter Koltl
in Identity Services Engine (ISE)
02-26-2019 11:42 PM
02-26-2019 11:42 PM
This is not a supported deployment. The deployment should have either
two nodes in total (all person...
Created by
Peter Koltl
in Identity Services Engine (ISE)
02-09-2019 01:37 PM
02-09-2019 01:37 PM
John, OU or other field: not suitable to determine the identity, not
suitable for authentication sui...
Created by
Peter Koltl
in VPN and AnyConnect
02-08-2019 06:47 AM
02-08-2019 06:47 AM
Jason, in which CTA version was Java removed?
02-03-2019 01:53 PM
I was surprised too but our Cat3850s with IBNS2 syntax send CDP, LLDP
TLV info in Access-Request pac...
Created by
Peter Koltl
in Identity Services Engine (ISE)
01-30-2019 01:56 PM
01-30-2019 01:56 PM
Events: ISE receives posture report second evaluation of authZ policy
starts on ISE (top-down first ...
Created by
Peter Koltl
in Identity Services Engine (ISE)
01-30-2019 01:33 PM
01-30-2019 01:33 PM
You should definitely not upgrade to 2.0. Upgrade from 1.4 to 2.0.1
directly to get better results.
Created by
Peter Koltl
in VPN and AnyConnect
01-26-2019 01:29 PM
01-26-2019 01:29 PM
You can specify in group policy how the ASA changes the client’s proxy
setting upon establishing the...
Created by
Peter Koltl
in Identity Services Engine (ISE)
01-22-2019 02:24 PM
01-22-2019 02:24 PM
Remote access or 802.1X ?
Public Statistics
| Date Registered | 01-08-2010 01:53 PM |
| Date Last Visited | 04-16-2019 01:42 PM |
| Total Messages Posted | 726 |
| Total Helpful Votes Received | 255 |
.jpg "VIP Engager"){kind=icon}
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 10 | |
| 5 | |
| 5 | |
| 5 |
.jpg "Hall of Fame Master"){kind=icon}
Awards
Community Spotlight Award
Mobile User, February 2016
Community Spotlight Award
Member's Choice, March 2016
Community Spotlight Award
Mobile User, September 2015
