Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Javier Portuguez
10-09-2017
Javier Portuguez
Member since
12-01-2009
Engager
10-16-2014
10:11 AM
Hello, I have tested the vulnerability and confirmed that it affects ACS 5.2. ACS 5.3 probably runs the same BASH version, so the it is most likely vulnerable. At this point, I would recommend to upgrade to any of the following versions: ACS 5.4 patch 7 ACS 5.5 patch 6 ACS 5.6 patch 1 HTH.
... View more
10-10-2014
05:37 AM
Hello, Well, if the RADIUS debug output does not list the attribute 25 then the server is not sending it. Did you follow the configuration steps indicated in the configuration guide of the RSA AM product? Unfortunately, it sounds like a configuration issue on the server side. HTH.
... View more
10-01-2014
05:40 AM
Hi, So you need to perform MAB authentication. As you mentioned, you will need to create a DB of MAC entries. In order to configure the Windows server (2003 or 2008?) to assign the dynamic VLAN you need to define the Remote Access Policies and create the custom attributes. For example: Tunnel-Medium-Type. Select a value appropriate to the previous selections you have made for the policy. For example, if the network policy you are configuring is a wireless policy, select Value: 802 (Includes all 802 media plus Ethernet canonical format). Tunnel-Pvt-Group-ID. Enter the integer that represents the VLAN number to which group members will be assigned. Tunnel-Type. Select Virtual LANs (VLAN). You can find more information here: Configure a Network Policy for VLANs VLAN Attributes Used in Network Policy 802.1X Authentication Services Configuration Guide, Cisco IOS XE Release 3SE (Catalyst 3850 Switches) HTH.
... View more
10-01-2014
05:30 AM
Hi, Are you connecting to the RSA server over sdi or Radius? If Radius, you could run the "debug radius all" on the ASA to check whether the attribute 25 comes back from the RSA server. HTH.
... View more
Created by
Javier Portuguez
in Discussões Segurança
in Discussões Segurança
07-04-2014
08:49 AM
07-04-2014
08:49 AM
Paulo, O que você vê quando o problema acontece? Poderia por favor compartilhar as configurações dos dispositivos? A gente precisa da configuração de seu dispositvo local e o dispositivo remoto. Obrigado,
... View more
07-04-2014
08:43 AM
Oi Nathan, Você está usando RADIUS ou LDAP para autenticar seus usuários? Radius, por padrão, protege a senha, mas não o nome do usuário. Se você estiver usando Radius, eu não esperaria que a senha a ser enviada em texto puro. Portu.
... View more
07-04-2014
08:35 AM
Hello Fernando, Have you placed a packet capture (TCP Dump) on the CAM to identify the SNMP traffic sent by the SW? Thanks,
... View more
Created by
Javier Portuguez
in Security Blogs
in Security Blogs
05-23-2014
04:50 PM
05-23-2014
04:50 PM
Recently, we have seen many issues with ACS changes not taking effect or wrong policies being hit. This seems to be caused by unsupported web browsers used to manage the ACS view database i.e. make changes through the GUI. The bugs are the following: CSCuo93378 Certain browsers cause ACS database corruption CSCuo88797 ACS 5.x should display message if unsupported browser is used for GUI. I strongly recommend you to use supported web browsers to make any changes. Refer to the next link for further information about your specific ACS version: ACS 5.3 Supported web browsers ACS 5.4 Supported web browsers ACS 5.5 Supported web browsers Best Regards, Javier Portuguez, AAA and VPN engineer.
... View more
Labels:
04-09-2014
05:36 AM
Sokmeng, To begin with, I think you should open a new case since this one was opened for another reason. Now, if you turn on debugs on the ASA, what do you see? The transform-set may be wrong, make sure you have one in tunnel mode, so the Cisco VPN client uses it to establish the connection. HTH.
... View more
04-08-2014
11:34 AM
It sounds good. Just make sure to install the Pointed patch before upgrading to 5.5. Thanks,
... View more
10-16-2014 10:11 AM
Hello, I have tested the vulnerability and confirmed that it affects ACS
5.2. ACS 5.3 probably runs ...
10-10-2014 05:37 AM
Hello,Well, if the RADIUS debug output does not list the attribute 25
then the server is not sending...
10-01-2014 05:40 AM
Hi, So you need to perform MAB authentication. As you mentioned, you
will need to create a DB of MAC...
10-01-2014 05:30 AM
Hi,Are you connecting to the RSA server over sdi or Radius?If Radius,
you could run the "debug radiu...
Created by
Javier Portuguez
in Discussões Segurança
07-04-2014 08:49 AM
07-04-2014 08:49 AM
Paulo,O que você vê quando o problema acontece?Poderia por favor
compartilhar as configurações dos d...
07-04-2014 08:43 AM
Oi Nathan,Você está usando RADIUS ou LDAP para autenticar seus usuários?
Radius, por padrão, protege...
07-04-2014 08:35 AM
Hello Fernando,Have you placed a packet capture (TCP Dump) on the CAM to
identify the SNMP traffic s...
Created by
Javier Portuguez
in Security Blogs
05-23-2014 04:50 PM
05-23-2014 04:50 PM
Recently, we have seen many issues with ACS changes not taking effect or
wrong policies being hit.Th...
04-09-2014 05:36 AM
Sokmeng,To begin with, I think you should open a new case since this one
was opened for another reas...
Public Statistics
| Date Registered | 12-01-2009 01:44 PM |
| Date Last Visited | 10-09-2017 12:13 PM |
| Total Messages Posted | 1,417 |
| Total Helpful Votes Received | 1502 |
Helpful Votes Given To
Helpful Votes From
