Hello,   For those use cases where the administrators don't have access or no longer manages the computer, is it possible to trigger a connector uninstall from the Cloud? Let's say that a laptop is stolen and we don't want to keep this connector consuming licenses or generating events. Or, with BYOD, the company let their employees install the connector on their personal computer, but once the employee leaves the company, the connector must be uninstalled remotely.   What is the approach for this?   Regards. ... View more

Hello,   Trying to understand the best practice for VLAN to EPG to BD mapping and leaf connectivity.   Let's say we have a number of virtual machines running on different VMware hosts all connected to the same leaf. These VMs belong to the same VLAN. The VLAN pool is static since we don't have distributed virtual switches (no VMware enterprise license). We want to separate the VMs in different EPGs. Per the recommendations below I should create one physical domain per server to make this possible, right?  There's no way to reduce the number of physical domain objects if all the servers will share the same VLAN pool?   What if the hosts are connected in VPC fashion to two leaves?     Regards. ... View more

Hello,   Per the Trustsec documentation here, there is a restriction in the 3750X and SGT:   "Cisco TrustSec enforcement is supported on only eight or fewer VLANs on a VLAN-trunk link. If more than eight VLANs are configured on a VLAN-trunk link and Cisco TrustSec enforcement is enabled on those VLANs, the switch ports on those VLAN-trunk links will be errordisabled"   So, I pressume that if I enable intra-vlan enforcement for more than 8 x VLANs spanning among different switches the trunk will go to errordisable, right? Anybody experimented this?   Regards. ... View more

Hello,   Is it possible to install AnyConnect and the AMP Enabler module in mode pre-deployment, without using ASA or ISE? Umbrella module can be deployed in this way, but can't find any references for AMP Enabler.   Regards. ... View more

Hi there,   Is it possible to perform SSO on mobile devices running AnyConnect and Per-App VPN, but not joined to the domain?  I need to migrate an existing environment using F5 Edge Client that has this functionality working but can't see any reference on how to perform this on Cisco and AnyConnect.   The use case consists on users accessing internal resources from their mobile phones (iOS, Android) without having to authenticate again since the Edge Client provides the user credentials transparently.   Regards. ... View more