Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We are in the process of rolling out a network upgrade using Cisco DNA Center. All of our switches are either Catalyst 9300 or 9500 series switches. We've noticed that after provisioning the devices that DNA Center leaves telnet access enabled on the...
We are trying to go live with FTD 6.2.3 managed by FMC. One of the last hurdles we have is setting the Browser Proxy to our internal WSA server. For some reason, Cisco doesn't currently support this either by the Remote Access VPN Policy or by using ...
I'm trying to figure out how to obtain a copy of all our device configurations from the configuration archive inventory. I can drill down into each device and export one at a time but this is extremely inefficient. How do I go about exporting them al...
After installing Spark and going through the initial email address verification, the Spark app imply won't launch. Nothing happens whatsoever when clicking the launcher. I called Cisco support but that wasn't helpful. Apparently the executable modifi...
My question is pertaining to the flow of traffic with an ASA 5555X with the FirePower services module and a WCCP Redirect to a WSA appliance.
I would think that the traffic flow should occur such as:
Http traffic --> ASA --> FP IPS --> WCCP to WSA...
Thanks for the feedback. I spoke with our implementation engineer. He confirmed that the BU is aware of the issue and will address this in a future update.
I discovered a pretty clean solution for this issue. In the ACS Authorization Profile, I enabled Radius Attributes for setting the following:
IE-Proxy-Server-Policy (4 - Use settings from concentrator)
IE-Proxy-Server (x.x.x.x:port)
This was the...
The openssl method from the cli works. Now we are encountering an issue in that modern browsers are ignoring the common name in the cert and instead are using the subject alternative name. By default the Microsoft CA server doesn't issue certs with ...
