About Antonio Macia

Antonio Macia · 08-05-2026

Hi,Is it possible to enforce the traffic on a virtualized environment without VMM integration like SUSE Harvester, when two VMs that belong to different EPGs/ESGs are in the same host and same VLAN, so the traffic takes place inside the virtual switc...

Antonio Macia · 04-23-2026

We are getting alarms related to the "UDP Received" security event. After checking the flows, it is Microsoft Teams traffic the one triggering the security event. Is it possible to turno of this security event for traffic using a specific set of port...

Antonio Macia · 03-10-2026

Hi,I configured a CSE for alerting everytime a TLS connection using a version lower than 1.3 is made. I'm getting the flow alerts but I cannot see any URL information that helps me identifying which particular URL is not compliant. Is there any way t...

Antonio Macia · 02-23-2026

Hi,We have a hierarchical access policy where the parent policy is applied to some firewalls and child policy to others. On the parent policy we have some rules with IPS functionality enabled and all the firewalls associated to the parent policy have...

Antonio Macia · 02-06-2026

Hi,I have successfully configured the integration between FMC and ISE to trigger an ANC policy using correlation rules. My objective is to apply an authorization profile into the ANC policy that delivers the "quarantined" SGT. However, using the "Qua...

Antonio Macia · 08-05-2026

Let me repharse the question. Per my understanding, two VMs that belong to different EPGs/ESGs, since the are assigned with different VLANs, the traffic reaches the leaf and enforcement takes place according to the contracts between EPGs/ESGs. Howeve...

Antonio Macia · 03-10-2026

Hi,The TLS fields are empty, not getting populated. Anyway, I was wondering if I could see the actual hostname of the domain? Let's say I want to gather information about the domains that use a encryption version lower than TLS 1.3. Is this possible?...

Antonio Macia · 03-09-2026

Hi @SzantaiNorbert , nothing yet, still adding one by one new tags on those firewall needed. It's a pitty there is no such function to group SGTs so we just add new SGTs to the existing groups in firewall rules and forget.

Antonio Macia · 02-06-2026

Hi @balaji.bandi The setup on the link provided uses a very similar approach than me, with the only difference of applying a DACL instead of an SGT. The issue I'm facing is that, no matter if I select "reauthenticate" or "quarantine" as ANC actions, ...

Antonio Macia · 02-01-2026

Hi Critian,We didn't test it. Let you know when done. Thanks for asking.Antonio.

Member Since	‎01-18-2010 02:18 PM
Date Last Visited	‎08-05-2026 11:47 PM
Posts	297
Total Helpful Votes Received	35

User Statistics

User Activity

ESG/EPG enforcement on hypervisor without VMM domain

SNA - Removing false positives

Display certificate information

Access control policy inheritance and licensing

ANC policy to deliver quarantine SGT

Re: ESG/EPG enforcement on hypervisor without VMM domain

Re: Display certificate information

Re: SGT groups in FMC

Re: ANC policy to deliver quarantine SGT

Re: Replacing L4/L7 device