Activity in Security
Trouble with ASAv anyconnect radius login
Hi EveryoneI'm using a trial version of ASAv and i believe it has full functionality but is limited in 100kbps. I'm trying to set up remote access anyconnect vpn which authenticates to our NPS radius server. As you can see in the radius debug, it see...
query on ASDM access
We have FTD devices with ASA image in production which managed by FMC and Also we are managing firewall through ASDM. so now we are removing the FMC from production and want to manage the FTD devices locally. so is there any impact if the firewall is...
ISE is Profiling an IP Phone Incorrectly?
Hello All, Cisco ISE: v2.0.0.306Switch: 3560 IP Phone: 7941G I have had many other 7941G IP Phones connected to this switch, which have all profiled/authenticated correctly. The only difference between those phones and this one, is that this phone...
ISE 3.2 Repeat Count Details
Hi,on ISE 2.4 in the live logs pages the report that one got clicking on the repeat counter was very useful because the endpoints were sorted by repeat counters. So it was very easy to find the endpoints with high repeated counters.With ISE 3.2 the r...
Duo Two-Factor Authentication for Palo Alto Admin UI without AD
Hello, has anyone successfully integrated Palo Alto Admin UI with Cisco Duo for 2FA without relying on Active Directory, but instead using a local user created on Duo solely for testing/PoC purposes? Any assistance would be greatly appreciated!
Cisco FPR version 7.2.5 is possible make group lock for local user
Hello , Cisco FPR version 7.2.5 is possible make group lock for local user that connect to local network over AnyConnect. I want to make Anyconnect access in our network where we have more group policy, we can not find that we can lock local user fo...
How to combine White List Entry - Server AND Mailadress
Hi all, i wonder if (and if yes how) its possible to combine a WhiteList Entry Server AND Mailadress. For example - we want to be sure that some mail adresses from a specific Server are whitelisted. Other Mails from this Server should be blocked and ...
Cisco VPN Client cuase windows crashes
Hi,I have a newly reinstalled OS Windows 11 PC. There is Cisco AnyConnect Secure Mobility Client on my PC to connect to my work access. Randomly my pc crashes, basically freezes. After manually power off and power on When I check event viewer the las...
"Change Password" functionality
Hi all;I have several questions regarding the 'Change Password' functionality in various areas of ISE because there is little or no useful guidance on this topic from Cisco...As far as I know, there are two places in ISE where you we can manage the "...
Firepower correlation and remediation
With the massive number of attacks on AnyConnect and other VPN's, I've begun looking into how to further remediate these login attempts. We have MFA in place.I'm having trouble understanding how to associate a remediation with a correlation policy.Ou...
Weak SSL/TLS Key Exchange
Hi I hope your doing well in our network infrastructure where we have Qualys to scan for vulnerabilities i can't find a solution for this certain vulnerability here are the details :Weak SSL/TLS Key Exchange impact an attacker with access to suffici...
How to capture dropped packet in ftd firewalll
Hellocould you please share the solution for showing dropped packet from internet to inside lan ? i have FTD 4100 series managed by fmc I want to see output from cli or fmc related to nat transactions packet(dropped and passed) both.
Snort3 not recognising SMTP/S but Snort2 did/does !?
I'm in the process of updating all our FTD's from Snort2 to Snort3 & almost everything appears to work, except SMTP/S email.Under Snort2 it shows in event logs as SMTP/S Client traffic type correctly, but when Snort3 is enabled, it does not recognise...
ISE DNS health check showing warning
Hi all,I have a four new standalone nodes which will be going into a cluster, I am seeing two nodes have a DNS warning. All nodes are located in the same caI can ping both DNS servers .21 and .22 and nslookup up works to resolve its own IPWhy are two...
Cisco ASA Anyconnect VPN Clients local IPv6 causes DNS issues
Hi All,We are experiencing some issues with different users, hope someone here can help solve it.First our setup, we have clients connecting with Client VPN using Cisco AnyConnect version 4.9.06037 and connecting to a Cisco ASA5585-SSP-20 running So...
| User | Helpful Count |
|---|---|
| 45 | |
| 42 | |
| 35 | |
| 22 | |
| 19 |
