About antonioyan99

antonioyan99 · 07-27-2023

Hi Cisco Firepower experts, I am preparing a FMC migration from old 1000 model to 1600 model. Got 2 questions. 1. Can the target FMC use a different MGMT IP other then the existing one? 2, The FMC is sending logs to SIEM, during the cutover, would th...

antonioyan99 · 09-15-2021

Hi Cisco Expert: I have an old FMC(FS750) which manages a couple of ASA5525 and FTP1010, I am planning to onboard the Firewalls to CDO and retire FMC. According to CDO configuration guide, I need to onboard FMC, which will onboard all the register...

antonioyan99 · 12-10-2019

Hi Cisco Guru, I am working on an integration for ISE to work with Microsoft Intune (MDM), the client was able to configure MDM in ISE, however , we could not find where to add this MDM server into authentication policy (eg, the option to authentic...

antonioyan99 · 05-17-2019

Hi Cisco Security Guru, I am trying to allow remote anyconnect VPN users to access ASA via SSH/ASDM, however it fails, denied by implicit rule: VPN IP Pool: 192.168.200.0/24, Internal interface: Vlan4015: 172.16.0.1/29 <necessary config>management-...

antonioyan99 · 03-17-2019

Hi Cisco ISE guru, I ran into a weird scenario for an ISE deployment, I have deployed about 700 endpoint into enforcement mode(low impact). 2 endpoints passes dot1x auth/authorization and the session receives "permit ip any any" DACL, the dacl sh...

antonioyan99 · 12-11-2019

Thank you for the clarification, can you please suggest how to perform the authentication?Here is the scenario:An endpoint which has registered in MDM only( not local AD) connects to the SSID using dot1x, the WLC send authentication request to ISE, ...

antonioyan99 · 03-17-2019

Here is the global config and port level config: policy-map type control subscriber DOT1X-DEFAULTevent session-started match-all10 class always do-until-failure10 authenticate using dot1x retries 2 retry-time 0 priority 1020 authenticate using mab p...

antonioyan99 · 03-17-2019

Here is the global config and port level config: policy-map type control subscriber DOT1X-DEFAULTevent session-started match-all10 class always do-until-failure10 authenticate using dot1x retries 2 retry-time 0 priority 1020 authenticate using mab ...

antonioyan99 · 03-13-2019

Yes this issue has been resolved.Thanks.

antonioyan99 · 04-20-2016

Even if you added the DNS entry 'sponsor.domain.com', when you type it in the URL, how does the browser know to add ":8443/sponsorportal/PortalSetup.action?portal=6dc51942-4cea-11e5-96d6-a46c2a9fd7d2" to the end?

Member Since	‎11-05-2014 09:21 AM
Date Last Visited	‎03-27-2024 12:16 AM
Posts	37

User Statistics

User Activity

FMC migration questions

Onboard FMC managed FTD/ASA FWs to CDO

Question regarding Integrate Microsoft Intune with ISE 2.4

Remote access VPN to access ASA via ASDM and SSH denied by implicit deny rule

Cisco ISE pushs DACL but switch port doesn't take it

Re: Question regarding Integrate Microsoft Intune with ISE 2.4

Re: Cisco ISE pushs DACL but switch port doesn't take it

Re: MAB authentication keeps failing after Dot1x succeeds

Re: LDAP search in forest failed

Even if you added the DNS