Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Peter Koltl
Online
Peter Koltl
Contributor
CCIE #10192
Awards
3
Recent Badges
Stats
Member since
01-08-2010
739
Posts
265
Helpful
51
Solutions
Created by
Peter Koltl
in Optical Networking
in Optical Networking
08-13-2019
02:16 AM
08-13-2019
02:16 AM
So is it not proprietary as the unnamed manufacturer provides the chip to multiple vendors? 40GBASE BiDi transceivers are quite common at other vendors.
... View more
Created by
Peter Koltl
in Policy and Access
in Policy and Access
08-04-2019
11:57 AM
08-04-2019
11:57 AM
Actually it is not mandatory to use an identity store with EAP-TLS. You can choose not to check any certificate attributes apart from validity and issuer although I assume you do not prefer that any valid (not revoked) certificate is granted access.
... View more
Created by
Peter Koltl
in Policy and Access
in Policy and Access
08-04-2019
11:48 AM
08-04-2019
11:48 AM
Another method that is much harder to circumvent is to demand a valid client certificate from the other domain. If there are certificates on those clients or if you can convince them to deploy certificates and 802.1X then you can validate the issuer as well as any subject field in ISE.
... View more
08-03-2019
12:50 PM
Flag X indicates that the flow is handled by Firepower module so you should check it. If no clues, try excluding this port from the service module inspection ACL.
... View more
08-03-2019
12:40 PM
Routing (including PBR) is not suitable for sending (redirecting) traffic to the proxy because the next hop (ISP router) will not consider the port-based rule, just routes the packet by the destination address. You should read the proxy manual about how the proxy expects the traffic (e. g. as an explicit proxy or via WCCP).
... View more
Created by
Peter Koltl
in Policy and Access
in Policy and Access
07-08-2019
09:18 AM
07-08-2019
09:18 AM
We have experienced the same issue with LDAP protocol. Workaround works too.
... View more
Created by
Peter Koltl
in Security Discussions
in Security Discussions
05-18-2019
12:19 PM
05-18-2019
12:19 PM
Compliance Module 4.x uses AM (Anti-Malware) categories rather than AV.
... View more
Created by
Peter Koltl
in Cisco Bug Discussions
in Cisco Bug Discussions
05-08-2019
12:17 PM
05-08-2019
12:17 PM
We have the problem with ASA 9.8(4) - CSM 4.16
... View more
Created by
Peter Koltl
in Policy and Access
in Policy and Access
03-25-2019
10:20 AM
03-25-2019
10:20 AM
Without a Certificate Authentifacion Profile ISE tries only password-based authentication methods and does not attempt to authenticate the session with a certificate.
... View more
03-24-2019
08:43 AM
I am not sure how a standard ACL is evaluated in a route-map. Are you positive that acl_pbr does what you intend to? It has a deny line for net_y then permit everything else and you expect to set next-hop for all the packets coming from net_y... I would create a different extended ACL.
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
03-14-2019
02:16 PM
03-14-2019
02:16 PM
Dynamic split tunneling
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
02-08-2019
06:47 AM
02-08-2019
06:47 AM
Jason, in which CTA version was Java removed?
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
01-26-2019
01:29 PM
01-26-2019
01:29 PM
You can specify in group policy how the ASA changes the client’s proxy setting upon establishing the tunnel.
... View more
Created by
Peter Koltl
in VPN and AnyConnect
in VPN and AnyConnect
01-01-2019
02:50 PM
01-01-2019
02:50 PM
Is it a hostscan aka ASA posture?
Or is it a System scan aka ISE posture?
Is there a System Scan window in the client?
... View more
08-25-2019
You mean Anyconnect Posture module (plus Compliance module)? If yes,
make sure your package in ISE C...
Created by
Peter Koltl
in Optical Networking
08-13-2019
08-13-2019
So is it not proprietary as the unnamed manufacturer provides the chip
to multiple vendors? 40GBASE ...
Created by
Peter Koltl
in Policy and Access
08-04-2019
08-04-2019
Actually it is not mandatory to use an identity store with EAP-TLS. You
can choose not to check any ...
Created by
Peter Koltl
in Policy and Access
08-04-2019
08-04-2019
Another method that is much harder to circumvent is to demand a valid
client certificate from the ot...
08-03-2019
Flag X indicates that the flow is handled by Firepower module so you
should check it. If no clues, t...
Created by
Peter Koltl
in Firewalls
08-03-2019
08-03-2019
Routing (including PBR) is not suitable for sending (redirecting)
traffic to the proxy because the n...
Created by
Peter Koltl
in Policy and Access
07-08-2019
07-08-2019
We have experienced the same issue with LDAP protocol. Workaround works
too.
Created by
Peter Koltl
in Identity Services Engine (ISE)
06-28-2019
06-28-2019
device-sensor notify all-changes access-session attributes filter-list
list ALIST cdp lldp dhcpacces...
Created by
Peter Koltl
in Identity Services Engine (ISE)
06-28-2019
06-28-2019
My additional questions: If the customer is concerned about potential
DNS disturbances, should we re...
Created by
Peter Koltl
in Identity Services Engine (ISE)
05-18-2019
05-18-2019
WMI query and SMS Admins are enough actually. The failure is caused by
the over-complex factory WMI ...
Created by
Peter Koltl
in Security Discussions
05-18-2019
05-18-2019
Compliance Module 4.x uses AM (Anti-Malware) categories rather than AV.
Created by
Peter Koltl
in Cisco Bug Discussions
05-08-2019
05-08-2019
We have the problem with ASA 9.8(4) - CSM 4.16
Created by
Peter Koltl
in Identity Services Engine (ISE)
05-06-2019
05-06-2019
You can clone a certificate (and the private key) and use it on multiple
nodes either for a single p...
03-25-2019
Without a Certificate Authentifacion Profile ISE tries only
password-based authentication methods an...
Created by
Peter Koltl
in Identity Services Engine (ISE)
03-25-2019
03-25-2019
Christopher, You should define an AAA server group in ASA and set the
Connection Profile/Tunnel Grou...
Public Statistics
| Date Registered | 01-08-2010 01:53 PM |
| Date Last Visited | 08-25-2019 10:31 AM |
| Total Messages Posted | 739 |
| Total Helpful Votes Received | 265 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 5 | |
| 52 | |
| 15 | |
| 10 | |
| 10 |
Helpful Votes From
| User | Helpful Count |
|---|---|
| 5 | |
| 5 | |
| 5 | |
| 10 | |
| 5 |
.jpg "Hall of Fame Master"){kind=icon}
Awards
Community Spotlight Award
Mobile User, February 2016
Community Spotlight Award
Member's Choice, March 2016
Community Spotlight Award
Mobile User, September 2015
