Security

802.1x Cert Auth - What does the PSN Do with the Client Cert?

Please see the attached file.  When a Windows client connects to the network and its supplicant is configured to send the computer certificate, what exactly is the PSN doing with this certificate?  In the attached i have a use of Lab_dot1x_Certs (See...

VPN route-based unable to ping remote IP

Hi, I am currently encountering issue on route-based ipsec vpn. I cannot ping my remote IP also the remote tunnel. I have verified that there is no decap showing on packets. I already configured static route between each site and still unsucessful of...

Service impact on ISE certificate renewal

Hello. I'm trying to renew the ISE's certificate, but I'm using both admin and eap authentication, portal, and radius DTLS. In this case, I would like to know if renewing this certificate will reboot the ISE or if it will cause downtime. The certific...

IPSec VPN Tunnel Lan-to-Lan decrypt count zero

Hi, I have one issue with IPSec tunnel Lan-to-Lan between ASA 5525x (v9.8) and ASA FPR 2110 (v9.16). My Tunnel is up but ping between each client was not successful. Both peer status sh cry isakmp sa in "MM_ACTIVE".I ran packet-tracer icmp between pe...

FMCv 7.2.5.1: High CPU load - how to troubleshoot?

Hello everybody,our customer has a FMCv running sugg. rel. 7.2.5.1 and has a high CPU load of approx. 97%.(see attached screen dump).The VM has 4 CPUs, 32GB RAM and 250GB HDD.The FMC is managing a HA of two Firepower 1120 running rel. 7.2.5.A FMC reb...

DUO offline keeps looping

Hi. Our end-users suddenly has issue with DUO offline, it keeps on looping on the offline page. This only occurs on end-users who are on overseas or outside Singapore. Initially, they can log-in to their DUO, however after few days, they're already p...

Cisco ISE integration with SCCM

Hi While Integrating ISE with SCCM 2012 based on below link, i am getting error related to DCOMhttps://community.cisco.com/t5/security-knowledge-base/how-to-integrate-cisco-ise-with-microsoft-sccm-for-patch/ta-p/3725035 Do any one having solution on ...

The operation took longer than expected.

I have just synchronized both Active Directory and Cisco ISE, ISE is using my server (AD) as an NTP server, everything is fine, but now I'm facing an issue "Status Summary: The operation took longer than expected. This may be caused by slow network c...

Site-to-site vpn failover causing memory spike in spoke sites

Hi All. I would like to get your thoughts on the following issue i have been facing since implementing Dual ISP and failover for site-to-site vpn tunnels.Hub Site:ASA5515 using 9.6(4)42Spoke sites:Cisco ISRs using 15.1(4)M8, using voip services over ...

Trustsec Network Authorization not Working

Hi All,I am newly building trustsec in my environment,trying to add one of the switch under trustsec. Have configured Trustsec settings and COA on the ISE for the switch and added the appropriate aaa commands , radius servers and cts commands.But sti...

How to allow RTP protocol in NAT and access list in FMC

Talos change IP Sender reputation increase from poor status

How can I enhance the reputation of the ip reputation on https://talosintelligence.com from poor? Our emails are being blocked by numerous customers utilizing the Cisco email security platform. i submitted the ticket but still remain unchanged.

Ingesting Panoptica data into Cisco Vulnerability Management

Frustrated by jumping back and forth between tools to try to understand your organization’s vulnerability exposure across both your containerized workloads and your traditional IT assets? Cisco Vulnerability Management (FKA Kenna Security) and Cisco...