hello all ,recently i tried to configure VPN site to site with certificate authentication type, i got the certificate signed by a third party autority , and when i did the debugs i got this log :CRYPTO_PKI: bitValue of KEY_USAGE = a0PKI[7]: CRYPTO_PK...
Hello, I'm trying to configure the switch so the ISE can trust the switch. here's the topology. [ISE IP: 172.16.10.25] I'm using this config in the switch: aaa new-modelradius server ISE1address ipv4 172.16.10.25 auth-port 1645 acct-port 1646 key 0 ...
Hi all,I am currently in the process of implementing ASA VPN certificate authentication with Cisco ISE and DUO MFA. However, I have encountered an issue where DUO seems unable to handle authentication without a password.As we are using certificate au...
Our company have purchased Cisco Guard XT and Detector XT for test purpose. But, we can't know the initial access password of these devices.Cisco documentation is telling that "Type admin to answer the user name. Type in the password supplied by Cisc...
Hi There, It seems the Duo WinLogon installer disables other Credential Providers during installation. We're encountering problems when other credential component apps are patched they take precedence over Duo. Is there a task we can perform to resto...
Bonjour à tous, Je suis sur un projet d'intégration de Cisco DUO pour une banque libanaise, j'ai déjà réussi à configurer le MFA pour fortigate SSL VPN, maintenant j'ai un problème pour configurer le MFA pour une solution PAM qui est "Safeguard for ...
The compliance column shows Released Entitlement for certain license types I just added. Just checking with the experts in the Community about what does 'Released Entitlement' mean .. is it that I am currently not consuming any licenses of this type,...
Buenas tardes, Solicito un apoyo al respecto, tengo un cisco ISE el cual fue instalado en el 2018 con una version 2.3, lo actualizamos cada año hasta dejarlo en cierta version que no admitía las licencias, decidimos volver a la version 2.7 donde er...
Hello,In our company we have two sites first we work on it and the second far from us 700 km usually I mange second site routers via SSH but recently we lost access so our engineer moved to the second site and remove all users & passwords from rom-mo...
Hi All,I configured rest-api and cisco asa but when I try to connect through the hhps://cisco-asa-ip:443/api it requires user/pass, so already created a local user but when I try to log in it is complaining from "Authorization Required" The below con...
Hi All, Am using ASA firewall to connect to BT broadband using PPPoE. It works fine now, I want to use the BT home hub as AP. I done the below steps but it looks like am still missing something. * Disabled DHCP server in BT home hub. * Enabled DHCP s...
Hello ,I am experiencing a port forwarding issue.We want a internal server's https web page to expose public access.The thing is - it is still not sucess.1. Other ports are working perfect except 443.2. Tested multiple same internal servers .. only 4...
i am getting error while registering the device FPR1140 running code 9.14(ASA) as : REGISTERING - REGISTRATION IN PROGRESSExport-Controlled Functionality: NOT ALLOWEDInitial Registration: FAILED on Jun 21 2023 10:29:49 UTCFailure reason: Communicatio...
Lab Topology:As you can see below, user David prefers to connect to LAN over EAP-TLS, but Simon prefers to connect over the LAN using PEAP.User David Configured to use EAP-TLS based authentication. User Simon Configured to use PEAP Authentication Aut...
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: