Security

Site-to-site vpn failover causing memory spike in spoke sites

Hi All. I would like to get your thoughts on the following issue i have been facing since implementing Dual ISP and failover for site-to-site vpn tunnels.Hub Site:ASA5515 using 9.6(4)42Spoke sites:Cisco ISRs using 15.1(4)M8, using voip services over ...

Trustsec Network Authorization not Working

Hi All,I am newly building trustsec in my environment,trying to add one of the switch under trustsec. Have configured Trustsec settings and COA on the ISE for the switch and added the appropriate aaa commands , radius servers and cts commands.But sti...

How to allow RTP protocol in NAT and access list in FMC

Talos change IP Sender reputation increase from poor status

How can I enhance the reputation of the ip reputation on https://talosintelligence.com from poor? Our emails are being blocked by numerous customers utilizing the Cisco email security platform. i submitted the ticket but still remain unchanged.

Ingesting Panoptica data into Cisco Vulnerability Management

Frustrated by jumping back and forth between tools to try to understand your organization’s vulnerability exposure across both your containerized workloads and your traditional IT assets? Cisco Vulnerability Management (FKA Kenna Security) and Cisco...

ISE Posture Patch Mgmt Windows Update Agent Definition check issue

Hi all.  Cisco ISE Posture Windows Patch Management Definition update not working properly.  Cisco ISE version 3.2 patch 5.  Client Agent : Cisco Secure Client 5.1.2 42 Windows client 11 23H2 and Windows Update version is 1023.x.  Comliance Module : ...

Meraki Duo SSO through SAML

I'm tryign to set up Duo SSO for Meraki Client VPN, the knowledgebase seems out of date as it refers to choosing the Applciation Protect page when currently it's meant to use SAML. I have a few items I am not 100% sure where to get1) I think the enti...

DUO offline keeps looping

Hi. Our end-users suddenly has issue with DUO offline, it keeps on looping on the offline page. This only occurs on end-users who are on overseas or outside Singapore. Initially, they can log-in to their DUO, however after few days, they're already p...

Duo Desktop not recognized

Hello, I am using Cisco Anyconnect to connect to VPN. The system is using Duo Desktop for device health. It is already installed, running and all the checks are ok. However, I am getting this error message and not able to proceed: Install Duo Desktop...

Allow ISE captive portal DNS entry on outside DNS.

Hello,We are having ISE for EAP/TACACS authentication and, hosted internally in our datacenter.Now we have configured BYOD captive portal that tied to AZURE SAML authentication, the current captive portal redirect URL from ISE has prepended the node ...

unknown IPs in FTD outbound logs

I am managing FTD-1120s with FMCv both running v7.2.1 software.  In my ACP I have a GEO rule to block all outbound traffic to China, Russia, and I few other "hotspots".   When I search for events that match this rule, most of the traffic is from inte...

Cisco Secure Client CVE-2024-20337

Following upgrading to upgrading to 5.1.2.42 to fix the vulnerability CVE-2024-20337Within Microsoft Defender this is still flagged as vulnerability for the CVEIt appears to refer to a component of the install:C:\Program Files (x86)\Cisco\Cisco Secur...

802.1x Cert Auth - What does the PSN Do with the Client Cert?

Please see the attached file.  When a Windows client connects to the network and its supplicant is configured to send the computer certificate, what exactly is the PSN doing with this certificate?  In the attached i have a use of Lab_dot1x_Certs (See...

Cisco advsecurity and SecurityK9 license transfer.

Hi all, I have a bit of an issue where I work in that we have a number of very old series 800 routers with either an advsecurity license or a securityk9 license installed, I don't have the smart accounts for any of these (before my time) and I am now...