Security

Resolved! FTD CLI SSH Debugging

Hi, I am trying to get some debugging done on my FTD via SSH, but it does not seem to work. Does FTD support debugging if done via SSH and issued under#system support diagnostic-cli || or do you have to use a console cable to see debug output? Us...

Resolved! Cisco Ise using default policy

HelloI have implemented some policies on Cisco ISE but it is using default policies instead of the ones i configured.Can i please get help on it.I have attached the the image below

DNS services coming to Jeddah, Saudi Arabia

Starting around February 17th, 2025 DNS services will be available on two separate sets of anycast IPs in Jeddah. Global anycast IPs: 208.67.222.222 and 208.67.220.220Saudi Arabia alternate anycast IPs: 146.112.70.70 and 146.112.71.71 Which IPs sho...

Resolved! Allowing Traffic through ASA without NAT

Hi!I have around 20 local networks. Im posting a basic topology with only 4 networks. Each server represents a network.Everything internally is working fine. Nothing will be going out to the internet. This is all within house. Now there is aclient th...

Resolved! How to add SHA 256 NTP Authentication key.

Hello Pros, we have 5 2960x, , with the latest STIG released on last Wednesday. we need to update the NTP authentication to now use SHA-256. The current IOS is running is C2960X-UNIVERSALK9-M I was trying to add (config)#ntp authentication-k...

Resolved! Cisco ASA 5512-X ""Lua runtime: not enough memory"

Good day everyone.Yesterday, I was working on a Cisco ASA 5512-X Firewall that was being used as a VPN Firewall when suddenly I was disconnected from the ASDM. My SSH session from Putty was closed, and I am unable to get back into any of them. I took...

AnyConnect client and custom attribute BypassVirtualSubnetsOnlyV4

Hi,I'm trying to get the workaround described in the chapter "Connectivity Issues with VM-based Subsystems" from the AnyConnect admin guide to work.https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/Cisco-Secure-Client-5/admin/guide...

Anyconnect VPN SAML SSO with Azure IdP, Multi-Tunnel Groups

SymptomsI had incredible difficulty locating details and even vendor support surrounding setting up Azure SSO to service anyconnect connectivity with multiple tunnel groups. So thought I'd potentially help by documenting the fixDiagnosisAfter followi...

No connection after configuring VPN into my topology

My topology contains 3 branches (Clusters) each cluster representing full working network, 2 ISP routers (1 ISP for branch 1 and 2) and a BGP ring (the ISP routers connected to different routers in the BGP ring). The branches could communicate betwee...

Meraki RADIUS with Microsoft NPS user IP in domain controller logs

We are currently using ISE-PIC and WMI integration with Windows AD for user/IP mapping and it works fairly well with domain joined wired desktops. We now want users to use their domain creds with wireless devices and will implement Microsoft NPS for ...

Cisco Secure Firewall - Default Network Discovery Policy for Apps

The Cisco Secure Firewall comes with a default Network Discovery Policy which is configured for 0.0.0.0 discovering applications. I'm commonly seeing some people doing 2 configurations: - Edit default Network Discovery Rule: . Delete 0.0.0.0 and put ...

Support for Resource Connectors in VMware vSphere 8.0

We are pleased to announce that Cisco Secure Access now officially supports Resource Connectors in VMware vSphere 8.0. This enhancement ensures that you can seamlessly deploy your Resource Connectors (RCs) to the latest vSphere environment, aligning...

Cybersecurity Threats Exposed: Real-World Attacks and Cisco Defenses

Cybersecurity Threats Join us for an exclusive webinar that explores the tactics of modern hackers, showcasing real-world cyberattacks alongside the powerful defenses offered by Cisco Security solutions. All the above will be accompanied by demonstr...

Help with ISE 3.2 API powershell scripting

Hi guys.New to this API call scripting malarky and need some assistance.. Basically im trying to change the access code on an ISE 3.2 guest portal. I can pull the necesary varibles with the script below, look at them, convernt them to json etc, ...

"Couldn't send passcode"

We had an end-user recently receive the error"Duo was unable to send a passcode in a text to "Mobile" (phone number). Please try another way to login."I was unable to find a related support article or conversation for this error. There is currently a...