Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello team,Running a deployment of 2 ISE (v3.4) both being Admin, Monitoring and PSN. I need to change their certificate, from self-signed to a PKI delivered certificate. New certificates are imported on the nodes, and now I’m trying to assess the im...
Hello mates,I’ve seen this error while trying to do a posture update: “Feed cannot be generated or parsed”:We have it for two weeks now and we patched our deployment yesterday but the issue is still here. When I try a to update now, I see my proxy go...
Dear community,I have a strange behavior with the VPN session timeout configuration of our RAVPN (running on FTD 7.6.4, managed by FMC).At first, it was set as unlimited on the FMC (appeared as vpn-session-timeout none on the running configuration of...
Dear community,
I recently setup a RAVPN using the Secure Client and an ISE deployment for authentication and posture. It works as expected for our corporate devices, but I have an issue with posture for non-corporate machines, like a linux desktop.
...
Hello everyone,
I’m looking into the upgrade of our FMC 4600 HA pair from 7.4.2-172 to 7.6.2-329 (currently the suggested release).
Looking at the documentation https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/compatibility/management-c...
Thank you, it confirms my suspicions.After changing the URL to https://iseservice.cisco.com/ise/posture-update.xml on our two deployment (running versions 3.2 P10 and 3.4) the updates work again:it's weird that the change is not at least indicated in...
Thank you.Just to clarify, posture evaluation is working for our endpoints, at least for now. It's the posture update, of the security definitions etc... that doesn't work anymore. Looking at the URL that is configured by default when you configure t...
Ok, found it!It was on the first AuthZ profile matched, the one that triggers the posture check of the user's device, in this one reauthentication is configured at 720 minutes, I don't know why:I'll see to change that, thank you very much for your he...
Thank you. I thought about it by the authorization profile we're using is not configured for reauthentications or with the radius session-timeout value:I've opened a tac case about this, I'll keep you updated.
Thanks for your test, below the output of my current session, and also the configuration of my group policy in which I've configured the timeout to 2880:Session Type: AnyConnect DetailedUsername : xxxx Index : 2134Assigned IP : x.x.x.x Public IP : x....
