About Joe Bloggs

Joe Bloggs · 07-16-2024

Is there any security benefit by putting in specific deny's for say known bad hostsin a firewall rule base when the rule base has an implicit deny all in it?

Joe Bloggs · 11-02-2022

Has anyone been able to integrate a Meraki Dashboard into DNA 2.x.We continually get a FQDN error for api.meraki.com on validation.Has anyone else experienced this. We're using a dedicated Cloud port via a Proxy. Connecting to all the other Cisco ser...

Joe Bloggs · 03-26-2020

Hi All,Does anyone know if it is supported to place the F5 ATM in front of an ISE PSN that is providing Guest and Portal web services only?Can't see anything in the documentation other than for the LTM module. I did notice that in the LTM guide in t...

Joe Bloggs · 03-19-2020

Hi,We peer with our ISP over dual Internet Circuits. Our Anyconnect infrastructure is a pair of ASA's with a Load Balance address. Pretty standard.Currently we are advertise the public addresses for the Anyconnect infrastructure out of both our upli...

Joe Bloggs · 01-14-2020

Hi,I've been looking at the SD-Access documentation/webinars and I am a little confused with the overlap with VXLAN. It's stated that the SD-Access is based around VXLAN and that 9500s are supported as Border devices.However the 9500s are not support...

Joe Bloggs · 07-17-2024

So i appreciate if you have some overly permissive rule and you wanted to stop one specific host from hitting that rule putting a deny in above makes sense.But if you only have specific ip's talking to specific ip's on specific ports is there any poi...

Joe Bloggs · 07-17-2024

So just logging then in your opinion?I can't see any other reason to have specific deny's in above a permit as the implicit deny would kick in.

Joe Bloggs · 11-07-2022

Thanks,How do you go about doing this on the DNA Appliances?

Joe Bloggs · 05-19-2022

I ran into this scenario as well. Through trial and error i got it to work by doing this:<MLTCMD>macro name testswitchport mode accessswitchport access vlan 999shutdown@</MLTCMD>

Joe Bloggs · 01-16-2020

This is the distinction I was struggling with. Thanks

Member Since	‎08-15-2011 07:23 AM
Date Last Visited	‎07-23-2024 01:04 AM
Posts	27
Total Helpful Votes Received	10

User Statistics

User Activity

Explicit Deny's on a Firewall

Meraki integration to DNA Center

F5 ASM infront of ISE Guest/Sponsor Portal

Anyconnect VPN Load Balancing

VXLAN spine or SD-Access border on the 9500?

Re: Explicit Deny's on a Firewall

Re: Explicit Deny's on a Firewall

Re: Meraki integration to DNA Center

Re: How to add Macros as part of template deployment to DNAC

Re: VXLAN spine or SD-Access border on the 9500?