About Milos_Jovanovic

Milos_Jovanovic · 12-04-2018

Hi, We are in process of migration ACS v5.8 to ISE v2.4 for a large international customer. My customer has a fully distributed deployment, operating on 3 regions/continents (EMEA, APAC, AM). ISE is used for 802.1x and VPN authentication, with AD int...

Milos_Jovanovic · 09-12-2013

Hi all,If i have 1M WAN link, what would be the value for traffic shaping: 1024000 or less? Bellow is an example of configuration on one of the routers in my company, and shapping value is set at 768000 with explanation that it always must be less be...

Milos_Jovanovic · 05-26-2023

Hey @Marvin Rhoads, From my standpoint, your case is quite different than one described With VPN LB, we have multiple FQDNs but terminating on different devices. With your case, we have multiple FQDNs, but all are on same device, which is not conven...

Milos_Jovanovic · 02-13-2023

Hi @Menon, Given that devices are working in HA, you'll only need one certificate for this. However, you do need to define FQDN for this, as public CA signed certificates usually don't support IPs inside. From this standpoint, there will be only one ...

Milos_Jovanovic · 02-13-2023

Hi @mumbles202, What is the entity ID and ACS configured on Azure side? Given that you are unsing non-standard port TCP/444, this needs to be reflected in those URLs too I belive. Kind regards, Milos

Re: One SAML for 2 AnyConnect profiles · 02-13-2023

Hi, I don't have FDM-managed device next to me, so I can't verify that it is the same as via FMC or as on ASA. In general, you don't need to create another SAML IDP on FMD (after all, it is indeed same, for multiple applications). On ASA/FTD side, th...

Milos_Jovanovic · 02-13-2023

Hi @jmaxwellUSAF, For sure you'd need to know what is the subnet that you'd need to encrypt traffic for. This is a must from policy-based VPN standpoint. Both sides need to align on crypto domain - which subnets will be used from your end, and which ...

Member Since	‎07-16-2013 05:39 AM
Date Last Visited	‎05-31-2023 01:43 AM
Posts	519
Total Helpful Votes Received	1160

User Statistics

User Activity

ISE 2.4 multi-domain forest - design recommendation

Traffic shapping example and explanation

Re: Saml for Cisco Asa in Load Balancing Group

Re: concerns about CA certificate purchasing

Re: ASAv AnyConnect Azure SAML Integration

Re: One SAML for 2 AnyConnect profiles

Re: Return route through VPN- Don't I need to know endpoint subnet?