An internal scan of our phones has resulted in a finding that phones reject an ssh connection when the SSH is disabled.  I would expect the phone to not respond to ssh requests if it is disabled as opposed to rejecting the connection on port 22.  Is there any way to enforce the device not to respond to ssh requests instead of rejecting them? We have tested by enabling the ssh on a phone and we get a prompt for creds, when disabled we get a connection refused.   Thanks,   Joe   ... View more

Is it possible to allow a wrap up for non acd calls?  We have a situation where if a call is delivered to an agent via a queue and they transfer that call to another agent, both agents get an opportunity to do a wrap up but the second agent can only set it with the original call. Call Flow   Agent A receives call ----> Consult Transfer to Agent B----while Agent A and B are talking both can input a wrap up call, once the call is transferred Agent B never gets an option to input a wrap up code.    Finesse Agents, UCCX version  11.5.1.11001-34 ...   Thanks,   Joe   ... View more

We are in the process of refreshing M3 Blades with M5 at 2 different locations.  The first location had 2 B200 M3 blades in a ESXi Cluster, we were able to replace the first blade with a M5 and attach the original M3 service profile and bring the bade into service within Vcenter.  All VM's were then migrated from the M3 to the M5 using Sandy Bridge EVC.  Then the other M3 blade was replaced, vm's separated between the 2 servers without issue.   Second site had 2 M3 blades and only 1 of them (off the books) is being replaced with a M5 blade.  Did the same process, moved all vm's M3, replaced the M3 with M5 and assigned service profile.  Vcenter will not allow for the migration of vm's to the M5 due to incompatibility.  Vcenter will not allow for the selection of EVC Sandy bridge as it states it is not compatible.  I am verifying the same firmware is being used, but I am not finding anything that would explain why one site allowed the the blades to coexist but the other will not.  Vcenter version is the same on both sites.   Please advise,   Joe  ... View more

We are in the process of testing deployment of NAM with SCCM.  If the user is on VPN they are disconnected during the install, can this be prevented?  Our goal is to deploy the NAM module on our workstations/laptops prior to any 802.1X enforcement.  We currently have the ISE in monitoring mode and only a few ports configured for 802.1X allowing MAB as well.  I have deployed a policy for both wired and wireless that allows for 802.1X.  I have not removed the laptop from our corporate network and attempted to join a non corp wireless network.  How does Anyconnect NAM react if there is no corp network available, will it use a predefined "home" network and allow the users to connect as they normally would?   Thanks,   Joe   ... View more

We have a raid 1 with 2 drives in a b series server and have purchase 2 larger drives. Is the process as simple as pulling one drive and letting it rebuild then replacing second. Once the raid is healthy extending space. The OS is windows installed on the blade.    Thanks,   Joe ... View more

We have around 1500 vpn clients and would like to utilize the internal CA on ISE to issue/revoke certificates.  Is this a supported deployment?  We have different authentication methods for specific vpn users (AD/RSA) and utilize a certificate map to trigger the tunnel group and ISE authentication policies to match.  We would like to be able utilize scep from the ASA to ISE to issue specific client certs.  We have this working but don't want to deploy if using the internal ISE CA in this fashion is not advise/supported.   Thanks,   Joe ... View more