About Philip D'Ath

Philip D'Ath · 09-03-2024

What is the process to register new clients with the Cisco Secure Client cloud management platform, located here:https://secure-client.apjc.security.cisco.com/ This used to be part of SecureX (which went EOL). This is the seperate client management ...

Philip D'Ath · 09-12-2023

I recently replaced a customer's 3750 stack with a 9300L stack (C9300L-24UXG-4X). Attached to this stack are two HP blade centres. About 24 hours after the new stack was in, the customer started experiencing intermittent packet loss to both blade c...

Philip D'Ath · 03-06-2022

I'm using Cisco AnyConnect on ASA against Cisco Duo. SAML is being used for authentication. Is there a SAML role I can push (from Duo) to apply a per-user ACL (like a RADIUS Filter-Id), instead of having to use some other authorisation option like RA...

Philip D'Ath · 10-29-2021

I have a customer with a bunch of ISR4331 routers running IOS-XE 16.9. These routers are air-gapped and have no connection to the Internet. They have APPX licences. They want me to upgrade them to something after 16.10. This means I must migrate t...

Philip D'Ath · 12-19-2020

I spent about a week trying to figure out how to get a Python web app to use the Duo Access Gateway (DAG) to perform user authentication using SAML. To save someone else this pain I have created an example on GitHub. https://github.com/pdath/cisco-d...

Philip D'Ath · 03-31-2025

Normally 802.1x is used for this, but that does require RADIUS ... The next best option is to configure the firewall to "deny all" traffic. Then manually apply the "Allow" group policy to clients that are authorised. https://documentation.meraki.com...

Philip D'Ath · 03-31-2025

Note that this is not a supported version of IOS-XE. As per the document, I would move to IOS-XE 17.12.3 - 17.12.4.

Philip D'Ath · 03-05-2025

You can also apply a simple block policy.

Philip D'Ath · 03-05-2025

You can create a group policy with a schedule (to either allow or deny access):https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying_Group_Policies#Scheduling Then, apply it to their device(s) from Netw...

Philip D'Ath · 12-15-2024

I can't read you screenshots rules - buy you do need to create ordinary layer 3 firewall rules.https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Using_Layer_3_Firewall_Rules Note that layer 3 firewall rules don't apply to...

Member Since	‎10-25-2001 11:47 PM
Date Last Visited	‎07-10-2025 06:22 PM
Posts	6,832
Total Helpful Votes Received	4021

User Statistics

User Activity

Cisco Secure Client Management

Cisco 9300L stack failing to learn MAC addresses dynamically

Using only SAML can you apply a per-user ACL for AnyConnect on ASA?

OFFLINE traditional licence migration to smart licencing on IOS-XE

How to authenticate against DAG using SAML from a Python web app

Re: Meraki Z3 - Device Access

Re: Cloud Monitoring for Catalyst Onboarding unused VTY

Re: How do I pause wifi access on my son's devices in our household?

Re: How do I pause wifi access on my son's devices in our household?

Re: How to block Inter-Vlan Routing Cisco Meraki MX64