Hello, We're having issues with our new Firepower 2100 when MACs try to connect because DTLS 1.2 does not pass. A comparison analysis of MAC Anyconnect 4.9.04043 agents in TLS and DTLS mode shows that the Cypher suites are not identical. The TLS Cyph...
Forum Posts
Hello,I just installed Umbrella Roaming security client and after installation i lost communication with ePO server. Please see screenshot. Does anyone know what might be an issue?
Hello, Following our proxy update from 12.0.1 build 334 to 14.5.0 build 537; it was observed after a few minutes of normal functioning,we get the code 407. We notice that the proxy sends authentication requests in a loop via browser popups. After an...
Hello, Following the update of our web proxy from version 12.0.1 build 334 to version 14.5.0 build 537. Authentication does not happen correctly on requests going through the proxy and only HTTP 407 returns are visible in the logs on flows requesting...
Resolved! Best Practice PAC Location on WSA
Dear Team, We have two WSA running in explicit proxy. We would like to store proxy pac file on WSA and we want client go with primary WSA as always and failover only if Primary WSA down. So is there any way to archive this goal? Note: Normally Proxy ...
Hi all,We are trying to block TLD’s (Top level domains) within the FTD’s / FMC. For example, we wish to block TLD’s that can pose threats such as RU, plus a few others. Currently, we have a rule built in the “Security Intelligence” to attempt a blo...
I need help for a Specific customer project. Currently we have MPLS with DC Singapore for the Intranet traffic & proxy >firewall for internet local Breakout.now for a specific team 10 users we need to build separate network peering using VRF & local ...
We are deploying Umbrella on our hybird user laptops. We are seeing internet speed reductions down to 1/10th of actual internet speed on these devices. We had a user today share screen captures of 2 separate devices (one using Umbrella, one not). ...
Hello, everyone. I am in my first month at new job and trying to fix some problems. One of them is that we have 2 WSAs those working in Forward mode. Browsers get WPAD.dat file from Citrix load balancer so that part of workers access internet through...
What will happen if the following Feature Keys expired?1. File Reputation2. Cisco Web Usage Controls3. Sophos4. File Analysis5. McAfee6. WebrootAnd how to check the feature being used or not?
From what I could remember and what I found during a recent search online, FMC manual URL filtering is mostly based on matching the hostname/domainname and/or sub domainname. So does this means I would not be able to use wildcard OR regex to define a...
Hi,In first place thanks a lot for your help.We have a Cisco WSA S390 appliance with version 14.0.3-014 as a enterprise proxy, the question is that we want limit the number of concurrent session from single ip, we want limit the number of concurrent ...
Resolved! FTD Application Block
Hello,I recently had some very high traffic by application risk come through, and I blocked this application A in my ACP. The first rule of this ACP is application blocks. Few days go by and dashboards show very high again, and when I open up context...
HI all, I am struggling with a small issue.We are running Azure Virtual Desktop POC, and we do not have a static IP assigned to the hosts. We also use Cisco Umbrella as our proxy for users, and I would like to update the network address of the Virtua...
Hi Team, I just want to ask, what method, and how Cisco determined some site/application belong to Risk : Very High, etc ? because in our customer deployment, there's a rules in ACP that Block Application that Belong in Categories Risk : Very High , ...
