Hi All, just trying to find a way to fix this. my client seems to have some issues getting AC in parallel OVPN to work. AC meant for the internal users and OVPN for the contractors. however this doesn't seem to work. however this did work with Juniper client/OVPN.   only think that I found online was, how to get OVPN to work with AC on the same device, which is not the issue my client is facing with.   any ideas, or do I need a TAC case for this?   thanks in advance Lance ... View more

Hi all,   since our client has upgrade the prime from 3.1 to 3.2 a big amount of network devices groups for Access Points have appeared, trying to delete them is not possible.   I assume this a DB hack and require TAC case, before I do that, just want to cross check with you if there are any other options you might know.   appreciate your response.   Lance ... View more

Hi all,   just wondering if you would know any workaround other than reload.   Device: Cisco ISE Product Identifier (PID): SNS-3495-K9 version is 1.4 paths 10. Version Identifier (VID): A I have a syslog configuration which sends the Cisco ISE logs on some syslog server. Since last week, 3 of these nodes (psn-p03, psn-p05, psn-p08) are not sending the logs to the syslog server. All other node are sending to the same node. there were no changes made to this design and has been working for over year The Workaround whihc is know to me is actually is to reload the ISE, but  would like to know if there is another workaround to resolve this issue. I have check the bugtool without any success. any advice greatly appropriated.   thanks in advance Lance ... View more

Hi all, I was wondering whether the above is possible at all, I created a policy under the ikev2 and without any options filled in I can see prf is by default set to sha even though I disable this (per no prf sha), it still select this as a default. so to my understanding this is not possible under ASA/router. am I correct is stating this. the reason to disable this under checkpoint device this is not available KEv2-PROTO-5: (97): Failed to verify the proposed policies IKEv2-PROTO-1: (97): Failed to find a matching policy IKEv2-PROTO-1: (97): Received Policies: Proposal 1: AES-CBC-256 Unknown - 56 SHA384 DH_GROUP_2048_MODP/Group 14 IKEv2-PROTO-1: (97): Failed to find a matching policy IKEv2-PROTO-1: (97): Expected Policies: Proposal 1: AES-CBC-256 SHA384 SHA384 DH_GROUP_2048_MODP/Group 14 Proposal 2: AES-CBC-256 SHA256 SHA384 DH_GROUP_2048_MODP/Group 14 Proposal 3: AES-CBC-256 SHA1 SHA384 DH_GROUP_2048_MODP/Group 14 IKEv2-PROTO-1: (97): Failed to find a matching policy IKEv2-PROTO-1: (97): I guess TAC would say the something which just mentioned!! thanks in advance Lance ... View more

Hi all, does anyone know how to clear the 4.12 DB. as per my clinet he was able to do it on version 4.8, but would like to confirm whether its the same on version 4.12. E.g Question : how to delete CMS 4.12 DB content   At CSM 4.8 CSM version I can delete the DB with the following commands : cd C:\progra~2\cscopx\bin perl dbRestoreOrig.pl dsn=cmf dmprefix=Cmf npwd=admin perl dbRestoreOrig.pl dsn=vms dmprefix=vms npwd=admin   perl C:\progra~2\cscopx\bin\dbRestoreOrig.pl  dsn=cmf dmprefix=Cmf npwd=admin perl C:\progra~2\cscopx\bin\dbRestoreOrig.pl dsn=vms dmprefix=vms npwd=admin perl C:\progra~2\cscopx\bin\dbRestoreOrig.pl dsn=mcp dmprefix=Mcp npwd=admin     How to perfrom this on CSM 4.12 DB ? Same commands are available ? thanks in advance Lance ... View more

Hi all, My client is facing with an issue related to bug which was fixed 5.4(0.46) but he is on 5.6.0.22.6. As per client screen shot we can see there is 48% space available on the /opt folder. Anyone has any idea? I would really appreciate it thanks in advance Lance PS: error message Cause : On-Demand Full Backup failed Details : Backup failed due to insufficient space for stating directory in /opt. Please configure backup-stating url from CLI for taking backup ... View more

Hi all, just wondering whether you know anything related to AC on linux and vulnerability. my client is seeking a statement from Cisco TAC regarding the following link  http://www.infradead.org/openconnect/ "Tempfile races allowing unprivileged users to trick it into overwriting arbitrary files, as root." Is this still (or was this ever true) for recent AnyConnect 4.x versions? before I run to TAC, can someone from Cisco TAC confirm this please? thanks in advance Lance ... View more

Hi all, does anyone knows why my client is hitting this, as per some real old comment this looked like a bug, but that was on v2.x 2016-07-05T12:15:37.844912+02:00 <WLC-Name> WLC-HAJ-PR-1: *spamApTask7: Jul 05 12:15:41.915: #LWAPP-4-SIG_INFO1: [PA] spam_lrad.c:44474 Signature information; AP<AP-MAC>, alarm ON, standard sig Broadcast Probe flood, track per-Macprecedence 7, hits 300, slot 0, channel 11, most offending MAC <MAC-address> client is on 8.0.121.0 most offending MAC = LG ELECTRONICS (MOBILE COMMUNICATIONS) thanks in advance Lance ... View more

HI all, My client is facing with an issue whihc I could not find under the bug tool. he is trying to add a special char "+" within the phone number (+44 ) and ISE doesn't seem to allow this. is this an invalid operation or should this be supported? thanks in advance Lance ... View more