About manvik

manvik · 03-07-2025

I am using Anyconnect VPN in ASA. ASA is done radius AAA to ISE and then to AD. how can ASA assign different group policy in ASA based on the AD user group. Intention is to assign different IP pool in ASA based on the AD user group (user connecting v...

manvik · 02-27-2025

I have integrated Cisco ISE pxGrid with Cisco FMC. Now, how to send few IP/MAC from Cisco ISE radius authentications to FMC so that the FTD firewall will permit only those IP in the access policy

manvik · 02-06-2025

any method for ISE posture to check whether particular KB are installed in an endpoint windows system. There's no windows WSUS server available too.

manvik · 02-06-2025

how to integrate cisco ISE with BigFix Patch management server. the goal is when a windows endpoint connects to ISE, ISE shd check bigfix patch server whether the endpoint is latest updated.If updated ISE posture permits the endpoint to network.

manvik · 01-30-2025

https://community.cisco.com/t5/security-knowledge-base/ise-profiling-design-guide/ta-p/3739456 referring this guide, is it possible to get details of systems connected to a Cisco switch in ISE profile endpoints context visibility section.The switch p...

manvik · 03-10-2025

ya. that makes sense

manvik · 03-10-2025

checked vpn-sessiondb. Group policy assigned is correct, but the tunnel group assigned is the default (DefaultWEBVPNGroup). Attached screenshot.

manvik · 03-08-2025

Thank you, i had to finally go with below in authorization profile; SpoilerAccess Type = ACCESS_ACCEPTClass = ou=gp-it-vpnCVPN3000/ASA/PIX7x-Address-Pools = it_vpncisco-av-pair = group-policy=gp-it-vpnAccess Type = ACCESS_ACCEPTClass = ou=gp-it-vpnCV...

manvik · 02-27-2025

thank you, is there any way to see the FTD access policy action or the IP that are included in the SGT without any client traffic reaching FTD. Currently FTD is in isolated network, not moved to live network.wanted to make sure the config works befor...

manvik · 02-27-2025

i connected few radius devices and the command "adi_cli session" shows attached screenshot results. There are two IP in the result, should be NAD switch and endpoint laptop. How FMC would apply the endpoint IP/MAC address alone from this result.

Member Since	‎09-15-2015 03:27 AM
Date Last Visited	‎03-13-2025 12:58 AM
Posts	270
Total Helpful Votes Received	61

User Statistics

User Activity

ASA VPN policy based on AD groups

ISE PxGrid with FMC access policy

ISE posture windows update KB

ISE with bigfix patch server

Network device SNMP proflie info

Re: ASA VPN policy based on AD groups

Re: ASA VPN policy based on AD groups

Re: ASA VPN policy based on AD groups

Re: ISE PxGrid with FMC access policy

Re: ISE PxGrid with FMC access policy