Activity in Security
Max number of licenses available for Cisco ISE
I'm speaking of Essentials/Advantage/Premier. We use on-prem SSM.is there way to know how many licenses Cisco ISE gets from the binding to a virtual account on Cisco SSM?The only piece of information is the consumed ones, like knowing how many you ar...
FMC IP fragmentation to no fragmentation settings can couse outage?
Hello everyone, I have the following issue:The customer would like to disable FMC packet fragmentation globally. According to the Cisco documentation it is quite straightforward.Source chapter: Fragment SettingsCisco Secure Firewall Management Center...
unknown IPs in FTD outbound logs
I am managing FTD-1120s with FMCv both running v7.2.1 software. In my ACP I have a GEO rule to block all outbound traffic to China, Russia, and I few other "hotspots". When I search for events that match this rule, most of the traffic is from inte...
The operation took longer than expected.
I have just synchronized both Active Directory and Cisco ISE, ISE is using my server (AD) as an NTP server, everything is fine, but now I'm facing an issue "Status Summary: The operation took longer than expected. This may be caused by slow network c...
Meraki Duo SSO through SAML
I'm tryign to set up Duo SSO for Meraki Client VPN, the knowledgebase seems out of date as it refers to choosing the Applciation Protect page when currently it's meant to use SAML. I have a few items I am not 100% sure where to get1) I think the enti...
Cisco ISE integration with SCCM
Hi While Integrating ISE with SCCM 2012 based on below link, i am getting error related to DCOMhttps://community.cisco.com/t5/security-knowledge-base/how-to-integrate-cisco-ise-with-microsoft-sccm-for-patch/ta-p/3725035 Do any one having solution on ...
End point detection
I am new to cisco endpoint and will need some help in creating rolling 3 months analysis for end point positive detectionsand also analysis for false positive detection.Any help and directions will be deeply appriciated.Thanks
Brute force attacks towards ASA
Hi! The last weeks it has been a big increase of brute force attempts from all over the world to our Cisco ASAs. We use two factors, so we're not to afraid that they will actually access any of our accounts, but the problem is that they manage to blo...
Allow ISE captive portal DNS entry on outside DNS.
Hello,We are having ISE for EAP/TACACS authentication and, hosted internally in our datacenter.Now we have configured BYOD captive portal that tied to AZURE SAML authentication, the current captive portal redirect URL from ISE has prepended the node ...
About Errors When Connecting to [anyconnect VPN]
The following message is displayed when the connection button is pressed. Please tell me how to solve it. Certificate Validation Failure AnyConnect VPI version 5.0.04232 Secure Client UI version 5.0.00889 Certificate Expiration Date 2025/4/3
Starting Your Journey With Cisco XDR
Join us as our experts walk you through streamlining the initial onboarding process for using Cisco Extended Detection and Response, also known as XDR. This session will provide a walk-through of the implementation and operation of the varying produ...
[EDIT] How to retrieve the portal ID of a guest account?
We have two ISE ecosystems different and isolated (2.7 and 3.2)I must migrate guest accounts from one system to the other one.On 2.7 we have two sponsorportals and so it is on 3.2.I managed to retrieve captive portal users through a python script of ...
Trustsec Network Authorization not Working
Hi All,I am newly building trustsec in my environment,trying to add one of the switch under trustsec. Have configured Trustsec settings and COA on the ISE for the switch and added the appropriate aaa commands , radius servers and cts commands.But sti...
Mitel - DHCP Discovery
Hi, I have a Mitel 5312 phone plugged into a switchport configured for ISE but when it boots up it gets stuck on DHCP Discovery. If I put the port to authentication open then it goes through and boots up as normal.The logs all look ok but I can't see...
Cisco Secure Client CVE-2024-20337
Following upgrading to upgrading to 5.1.2.42 to fix the vulnerability CVE-2024-20337Within Microsoft Defender this is still flagged as vulnerability for the CVEIt appears to refer to a component of the install:C:\Program Files (x86)\Cisco\Cisco Secur...
| User | Helpful Count |
|---|---|
| 52 | |
| 44 | |
| 33 | |
| 23 | |
| 22 |
