I have a working SAML configuration via OKTA tied to a tunnel-group called tunnel-01.  It has its own entity ID and certificate which works fine.  We have a request for an additional SAML connection profile using OKTA which we have no luck getting wo...

Can someone please help me figure out why NTP is not being allowed when this ACL is applied inbound on the internet facing interface?  everything else works but NTP broke and not sure why.    interface GigabitEthernet0/0/0 ip address 1.2.3.4 6.7.8.9...

Having a problem with a new site with the far end behind a firewall.  Tunnel interface is up/up, routes are there but nothing is being encapsulated across the tunnel.  I see decaps but no traffic passing from hub to spoke.  I cannot ping the far end ...

Can someone help me understand what is happening here? no matching proposal from both sides then the hub immediately request deletes and no luck figuring out why. Debugs and relevant configs are below. *Aug 1 21:32:09.155: IKEv2:(SESSION ID = 190,SA...

I am trying to get this working to no avail.  Whether I exclude the domain I want to resolve locally or include the domain I want to resolve through the tunnel the client sends all requests through the tunnel.  I am specifying a DNS server on the gro...