Happy new year everybody! please allow me a question because I have some problems in the understandig of the end user behavior when it comes to access of Private Application which can be achived via Client-Based ZTNA and ones which are only available...
Forum Posts
Hi All, Wsa model S196 management port M1and Proxy P1 and P2 are Rj45 port or SFP type ?
Is there a way to integrate Active Directory (Child Domain) to Cisco Secure Access without any involving any Enterprise Account?Our setup with Cisco Secure Access and Active Directory integration using domain and AD connector, when installing AD conn...
Resolved! Managing Cisco Secure Access IP pools
It looks like once you created an IP pool and assigned it a region, the region cannot be changed anymore afterwards?How would you go about that? At this moment, the only way around is deleting that specific IP pool al together and start over again wi...
Hello everyone,First post here, hopefully this is the right place.We use Cisco Meraki in our offices, and use Radius/NPS to authentication our end users against the onprem Active Directory.Since we are migrating to Azure AD (not related to the onprem...
We experience inconsistent user experience when using the internal network or on-network, there are times that we can access the site or not and no logs are captured. We are using AD users' identities only that shared information with roaming client....
I am experiencing different "Issued by" validation of the certificate, it should be by Umbrella no matter what sites are either allowed or blocked. Like this: am I right?But when I checked it using a different website, it showed different "Issued by"...
We want to test Umbrella CDFW for a specific set of users and as far as I know CDFW does not support identity as a source in the policy rules. I was wondering if we can set in the CIDR field as a source a private RFC 1918 segment from our organizatio...
Hi, can the new Cisco Secure Access with ZTNA use the Trusted Network Detection (TND) where when the corporate domain is not reachable, ZTNA will automatically contact the Cisco Secure Access cloud. On the other hand, if the corporate domain is reach...
Good day. We are looking at testing out deploying Cisco ASAv and/or FTD in Azure as part of new requirement. Question I have is it possible to set up high availability (Active/Standby) between two different regions (ie. Active is in one region and st...
Hi All, Have some query regarding Wsa model S196 1. As per below document upgrading wsa to 15.2.0-164 Async OS will not support M2, data interface 1 & 2. PFB snapshot and reference link https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa-15-2/rele...
Resolved! Umbrella-Meraki Integration
Hello, I have a couple of questions regarding the Umbrella-Meraki integration. A customer just did an integration and we can now see some MX devices are now showing up in the Umbrella portal under network devices. However almost all of them are showi...
The customer has already deployed Umbrella DNS protection with AnyConnect client and now they want to utilize CDFW and web proxy. I was wondering what is the default behavior in Umbrella for forwarding traffic for HTTP and HTTPS if you have AnyConnec...
Hi All, Need to install WSA model S196 into my network as an Explicit forward proxy. Should i need to connect/configure port M1 for management and P1 for proxy traffic or any other port also.
Hi needing for assistance on how to use zero trust access for internet destinations. I am testing for users who connected to secure client zta to allow or block internet destinations. I created internet destinations and access policy for internet acc...
